SEBI Chairman Tuhin Kanta Pandey has introduced two new digital platforms for incident reporting and cyber defence to strengthen market safety. During a symposium in Mumbai, the regulator also confirmed that the recently launched Closing Auction Session (CAS) will remain a permanent feature, despite ongoing industry feedback. These moves reflect the regulator's push for tighter digital infrastructure and operational discipline.
Securities and Exchange Board of India (SEBI) Chairman Tuhin Kanta Pandey has unveiled a major shift in how the financial sector manages cyber threats. Speaking at a cyber defence symposium in Mumbai, he emphasized that cybersecurity is no longer just an IT issue but a critical boardroom priority. As financial markets become more digital and interconnected, a security lapse at one firm can now impact the entire ecosystem.
To address these risks, SEBI has launched two new digital initiatives: the SEBI Incident Reporting Portal and the Cyber Suraksha Portal. These tools are designed to streamline how financial entities report security breaches, ensuring that information is shared quickly to help the broader market detect and contain threats before they escalate. The regulator is moving away from a 'periodic' security check model to a continuous, risk-based approach that monitors changes in software, cloud configurations, and third-party dependencies in real-time.
Closing Auction Session Confirmed
Beyond cybersecurity, the Chairman also addressed the industry’s focus on trading operations. He confirmed that the Closing Auction Session (CAS), which was introduced on August 3, 2026, is here to stay. While the regulator is still reviewing feedback from market participants, the confirmation signals that SEBI intends to maintain this new trading mechanism. For investors and brokers, this means operational workflows related to late-day trading must be fully integrated into their systems, as the regulator is not planning to roll back the change.
Preparing for Future Tech Threats
Looking ahead, SEBI is also preparing the market for risks associated with emerging technologies. Pandey highlighted that the rise of quantum computing poses a future challenge to current data encryption standards. The regulator is encouraging financial institutions to begin planning for 'post-quantum' security, which involves upgrading systems to protect sensitive data from advanced decryption techniques.
Similarly, while AI and automation tools offer powerful ways to detect fraud and manage data, they also introduce new risks. The Chairman stressed that any AI system used for cybersecurity must be governed with strict accountability. For market participants, these updates highlight a period of increased regulatory focus on operational robustness. Investors should continue to monitor how these new reporting portals and trading mechanisms influence market stability, particularly in terms of how quickly institutions can adapt to these evolving technical and operational requirements.