Northspread
Archive / Research Analyst / Legal and Regulatory Environment
nism-series-xv-cscrf-five-cyber-resiliency-goals[ RESEARCH ANALYST ]

What are the five standardized cyber resiliency goals established under SEBI's Cyber Security and Cyber Resilience Framework (CSCRF) adopted from CERT-In?

[ A ]Speculate, Leverage, Arbitrage, Short, and Liquidate
[ B ]Incorporate, Capitalize, Depreciate, Amortize, and Audit
[ C ]Anticipate, Withstand, Contain, Recover, and Evolve[ CORRECT ]
[ D ]Bidding, Allotment, Listing, Delisting, and Rematerialization
Takeaway

Option C is correct: Anticipate, Withstand, Contain, Recover, and Evolve

Derivation
SEBI's Cyber Security and Cyber Resilience Framework (CSCRF) sets uniform cybersecurity operational standards for regulated entities based on five fundamental cyber resilience goals formulated in the Cyber Crisis Management Plan (CCMP) of CERT-In: (1) Anticipate (maintain informed preparedness to forestall cyber compromise), (2) Withstand (continue essential mission/business functions during attacks), (3) Contain (isolate affected systems to limit attack blast radius), (4) Recover (restore core operations swiftly post-incident), and (5) Evolve (re-architect defenses based on post-incident learning). This tests regulatory technology standards. The common error is confusing cybersecurity goals with financial trading or accounting terminology.
Why the others fail
A — Speculate, Leverage, Arbitrage, Short, and Liquidate
Speculate, Leverage, Arbitrage, Short, and Liquidate are trading and market strategies, not cybersecurity resilience goals.
B — Incorporate, Capitalize, Depreciate, Amortize, and Audit
Incorporate, Capitalize, Depreciate, Amortize, and Audit represent financial accounting stages, not cyber crisis management.
D — Bidding, Allotment, Listing, Delisting, and Rematerialization
Bidding, Allotment, Listing, Delisting, and Rematerialization are securities primary/secondary lifecycle terms.