Question 1

What is the Cyber Risk Maturity Radar?

Accepted Answer

The Cyber Risk Maturity Radar is a free self-assessment tool aligned to SEBI CSCRF (Cyber Security and Cyber Resilience Framework). You rate your organisation across the 6 CSCRF functions — Govern (GV), Identify (ID), Protect (PR), Detect (DE), Respond (RS), and Recover (RC) — on a 1-to-5 scale. The tool generates a radar chart, overall maturity tier, top 3 gap actions, and a board-ready summary.

Question 2

What are the 6 SEBI CSCRF functions?

Accepted Answer

SEBI CSCRF is organised around 6 functions aligned to NIST CSF 2.0: GV (Govern) — policies, roles, risk management; ID (Identify) — asset inventory, risk assessment; PR (Protect) — access control, data security; DE (Detect) — monitoring, anomaly detection; RS (Respond) — incident response, communications; RC (Recover) — recovery planning, business continuity.

Question 3

What are the 5 SEBI CSCRF maturity tiers?

Accepted Answer

SEBI CSCRF maps to 5 maturity levels: 1-Initial (ad-hoc, no formal processes), 2-Developing (basic policies exist but inconsistent), 3-Defined (documented, repeatable processes), 4-Managed (measured and controlled), 5-Optimising (continuous improvement, automated controls).

Question 4

Who needs to comply with SEBI CSCRF?

Accepted Answer

SEBI CSCRF is mandatory for all SEBI-regulated entities including stock brokers, depositories, depository participants, stock exchanges, clearing corporations, mutual funds, KRAs, and portfolio managers. SEBI Circular SEBI/HO/ITD/ITD-PoD-1/P/CIR/2024/33 sets the compliance requirements and timelines.

Question 5

How do I use this tool for a CSCRF board presentation?

Accepted Answer

Rate all 6 functions, then use the generated board summary paragraph directly in your board cybersecurity report. The radar chart visualises your posture against a target maturity of 3.5, the gap actions prioritise remediation, and the maturity tier maps to the SEBI CSCRF tiering language regulators expect.

Cyber Risk Maturity Radar

SEBI CSCRF Radar

Top Priority Gaps

Board Summary