Markets regulator Sebi on Monday decided to introduce an IT Resilience Index (ITRI) to assess the functioning and resilience of information technology systems of market infrastructure institutions (MIIs), including stock exchanges, depositories and clearing corporations.
The move is aimed at strengthening oversight of the resilience of IT systems and identifying emerging weaknesses at an early stage, so that timely corrective measures can be taken.
Under the framework, the ITRI will be computed using a uniform set of nine parameters, each carrying a specific weightage to ensure comparability across MIIs, Sebi said in its circular.
Availability and security will carry the highest weightage of 20 per cent each, followed by integrity, governance, reliability and monitoring, business continuity, and modularity and flexibility at 10 per cent each.
Scalability and other aspects, including incident handling, will account for the remaining 5 per cent each.
Sebi said MIIs will also develop an Early Warning System (EWS) to detect any deterioration in ITRI parameters that could potentially lead to performance issues, system slowness or other disruptions, and take remedial measures.
MIIs have already implemented the beta version of the ITRI framework and will operationalise the framework, including the EWS and real-time monitoring of service delivery, by February 28, 2027.
The first ITRI computation under the framework will cover the half-year ended March 31, 2027.
MIIs will compute the index on a half-yearly basis within 60 days of the end of each half-year and submit a comparative analysis of two consecutive half-years, along with corrective actions taken or proposed, to their Standing Committee on Technology (SCOT) and governing boards.
Sebi said the computation of ITRI will be system-driven to ensure that the process remains objective, non-discretionary and foolproof.
In case any parameter cannot be computed automatically and requires manual intervention, the MII will undertake manual data retrieval only after discussing the exception with its SCOT.
The Information Systems Framework (ISF) will formulate baseline parameters, acceptable threshold scores and Standard Operating Procedures (SOPs) for calculating the ITRI, along with an objective, system-driven scoring methodology to ensure comparability across MIIs.
The framework is designed as a self-operating model under which MIIs will periodically compute the ITRI and provide their governing boards with an assessment of the overall health of IT systems and areas requiring improvement.
Sebi said MIIs already continuously monitor the performance of processes and applications, as well as utilisation of system resources at the component level, to enable early detection of possible performance issues and system slowness.
Under the framework, MIIs will also build systems providing continuous visibility into service delivery to market participants. These systems will include consolidated dashboards for monitoring system and application performance, service delivery and any deviations or anomalies.
Source: Read the original article on www.business-standard.com