🔥 Gündem Understanding the New NISM IT Resilience Index for Market Institutions

The NISM IT Resilience Index is a framework introduced by the Securities and Exchange Board of India (SEBI) to assess and strengthen the IT resilience of Market Infrastructure Institutions (MIIs) in India ¹⁶. While the acronym NISM often refers to the National Institute of Securities Markets, in this context, it is associated with SEBI's initiative to enhance the robustness of critical financial systems ⁵¹.

Purpose and Scope

The primary goal of the IT Resilience Index is to ensure that MIIs—such as stock exchanges, clearing corporations, and depositories—can withstand and rapidly recover from various IT disruptions, including cyberattacks, system failures, and operational challenges ¹. This initiative is crucial for maintaining the stability and integrity of the Indian financial markets.

Key Features and Components

The SEBI IT Resilience Index (ITRI) framework, which came into effect with a circular in 2026, incorporates several key aspects ⁶:

• 100-Point Framework: It is a comprehensive 100-point assessment system designed to evaluate the IT resilience capabilities of MIIs ¹.
• Nine Parameters: The index assesses MIIs across nine critical parameters related to their IT infrastructure, cybersecurity measures, and operational continuity plans ¹. These parameters likely cover areas such as data security, network resilience, disaster recovery, incident management, and vendor risk management.
• Bi-Annual Assessment: MIIs are required to undergo this assessment twice a year, ensuring continuous monitoring and improvement in their resilience posture ¹.
• Early Warning Mechanisms: The framework mandates the implementation of early warning mechanisms to detect potential threats and vulnerabilities proactively ¹⁶.
• Real-time Monitoring: MIIs are required to have capabilities for real-time monitoring of their service delivery and IT systems, allowing for immediate response to any anomalies ¹⁶.
• System-Driven Measurement: The index emphasizes a system-driven approach to measuring IT resilience, reducing human error and ensuring consistent evaluation ⁶.

Implementation Timeline

MIIs are expected to comply with the requirements of this framework and have the necessary systems and processes in place by February 2027 ¹. This timeline underscores SEBI's commitment to enhancing the resilience of the financial market infrastructure within a defined period.

Broader Context of Resilience Indices

The concept of resilience indices is not unique to the financial sector. Similar frameworks exist to measure resilience in various domains:

• Internet Resilience Index (IRI): Developed by the Internet Society (ISOC Pulse), the IRI tracks indicators and assigns a weighted score to countries to assess their internet's ability to adapt to challenges ².
• Market Systems Resilience Index (MSRI): This index measures the capacity of a market system to adapt to external and internal shocks, guiding international development practitioners in resilience assessments ³.
• Urban Resilience Indices: These indices provide a holistic articulation of urban resilience, often based on universal factors that contribute to a city's ability to withstand and recover from various events ¹⁰.

The NISM IT Resilience Index, therefore, is part of a growing trend to quantify and improve the ability of critical systems and infrastructures to maintain operations in the face of disruptions, specifically tailored for the unique demands of the Indian financial markets.