Whalesbook
SEBI Steps Up AI Cybersecurity for Indian Markets
The Securities and Exchange Board of India (SEBI) has issued a critical advisory, marking a strategic shift in cybersecurity preparedness across the nation's financial markets. The creation of the 'Cyber-Suraksha.ai' task force, composed of representatives from market infrastructure institutions (MIIs), registrars, and other regulated entities, highlights the regulator's proactive stance against the escalating threat from advanced Artificial Intelligence (AI) tools, such as Anthropic's Claude Mythos Preview. This initiative requires a continuous, intelligence-led defense strategy, moving past older cybersecurity methods and emphasizing leadership in cyber trustworthiness rather than just regulatory compliance.
Understanding the AI Threat
AI-driven tools can detect system weaknesses with remarkable speed, but they also significantly increase the risk of exploitation, data breaches, and compromised applications. SEBI recognizes that India's interconnected financial market means a weakness in one part can cause wider problems. The advisory requires operating systems and applications to be patched quickly, alongside regular vulnerability assessments using both traditional and AI tools. It emphasizes stronger security settings, access controls, and Zero Trust Network Access (ZTNA) to reduce potential attack points. Srinivas Yadav Karri, Chief Information Security Officer at KFin Technologies, noted that AI-related systemic risks stem from interconnected platforms, third-party vendor reliance, and the rapid pace of AI-driven vulnerability discovery.
Global Peers Focus on AI Cyber Risk
India's move aligns with a global trend where financial regulators are prioritizing AI governance and cybersecurity. Internationally, bodies like the U.S. Department of the Treasury are leading efforts to improve AI risk management through public-private initiatives. In Singapore, the Monetary Authority of Singapore (MAS) is consulting on AI risk management guidelines, focusing on fairness, ethics, accountability, and transparency. The European Union's AI Act takes a risk-based approach, imposing stricter rules on high-risk AI applications. Globally, the International Monetary Fund (IMF) has warned that advanced AI models can significantly reduce the time and cost to exploit vulnerabilities, posing a systemic financial stability risk. The Bank of England's governor also warned that AI could fundamentally change the cyber-risk landscape. KFin Technologies, a registrar and transfer agent, operates within this environment. As of May 2026, its Price-to-Earnings (P/E) ratio was approximately 40.87, below the industry average of 54.73. The company is nearly debt-free and has shown healthy profit growth over the past five years.
Challenges Remain: Legacy Systems and Third-Party Risks
Despite SEBI's directive, significant challenges persist. The Indian banking sector, in particular, struggles with legacy technology, outdated coding languages, and fragmented software, making them vulnerable to advanced AI exploits. Praveen Kumar, MD & CEO of Barclays Global Service Centre India, stated that traditional defenses are insufficient against AI threats, requiring AI-powered countermeasures. Reliance on third-party vendors adds complexity, as a compromise within the supply chain can have widespread implications. Regulators themselves may lag behind the financial sector in adopting AI, potentially hindering their ability to monitor and fight emerging risks effectively. The dual nature of AI as both an offensive and defensive tool, combined with the difficulty of rapid regulation development, creates an ongoing challenge for cyber trustworthiness.
Future Investments and Collaboration
The SEBI advisory is expected to drive substantial investment in cybersecurity infrastructure and solutions, benefiting IT service providers. KFin Technologies is integrating multi-layered defenses, encrypted APIs, and disciplined patch management, while also evaluating advanced testing and supply chain transparency through SBOM practices. The widespread adoption of AI-assisted defenses, continuous monitoring, and enhanced collaboration between regulators and market participants will be crucial. This proactive regulatory stance aims to build systemic resilience and protect the integrity of India's financial markets against an increasingly sophisticated threat environment.