SEBI System Audit & CSCRF Implementation for a Leading Equity Broker
Sector
Capital Markets — Equity Broker (NSE/BSE registered)
Engagement Type
SEBI Mandatory System Audit + CSCRF Gap Assessment + Remediation Advisory
Duration
12 weeks
SEO Keywords
SEBI system audit broker, CSCRF implementation, broker cybersecurity audit India
The challenge
A leading equity broker with 2 lakh+ active clients had received adverse observations in their previous SEBI system audit — specifically around log management, DR readiness, and access management. The new SEBI CSCRF framework had also introduced additional cybersecurity requirements that the client needed to map, assess, and remediate before their next audit cycle. The previous audit firm had provided a long report with observations but no practical remediation guidance.
What Zorixx Did
- Conducted a full SEBI system audit across infrastructure, applications, cybersecurity, DR, and access management
- Mapped all observations from the previous audit cycle and verified remediation status
- Performed a comprehensive CSCRF maturity assessment across all 5 domains (Identify, Protect, Detect, Respond, Recover)
- Identified 23 gaps across CSCRF — prioritised by risk rating and regulatory urgency
- Designed a detailed remediation roadmap with implementation owners, timelines, and success criteria
- Conducted a DR drill assessment — reviewed documentation, tested RTO/RPO against SEBI requirements
- Delivered board-ready presentation for the Audit Committee — heat-mapped risk dashboard, compliance status scorecard
Outcomes
System Audit Result
Clean system audit report — zero critical findings, 3 medium observations (all with remediation plan)
CSCRF Score
Moved from Level 1 (Basic) to Level 3 (Intermediate) maturity across all CSCRF domains
DR Readiness
DR drill completed successfully — RTO/RPO within SEBI prescribed limits
Log Management
Centralised SIEM deployed — 100% log coverage for all critical systems
Audit Committee Feedback
Described as 'the most actionable audit report we have received in 5 years'