Description

NSE requires all trading members to submit Quarterly Cyber Incident Reports for Q4 FY2026 (ending March 31, 2026) via the ENIT member portal by April 15, 2026.

Summary

NSE has issued a reminder circular requiring all Regulated Entities (REs) and trading members to submit their Quarterly Cyber Incident Report for the quarter ending March 31, 2026, through the ENIT member portal on or before April 15, 2026. This is in line with SEBI’s Cyber Security & Cyber Resilience Framework circular dated August 20, 2024.

Key Points

  • Quarterly Cyber Incident Report for Q4 FY2026 (January–March 2026) must be submitted by April 15, 2026
  • Submission must be made via the ENIT member portal: ENIT → ENIT-NEW-TRADE → Trade → Incident Report → Quarterly Report Submission
  • Digital signature is NOT required for submission of Quarterly or Immediate Incident Reports
  • Members must confirm whether any cyber breach was observed during the quarter (Yes/No)
  • If no breach occurred, a “Nil Submission” checkbox must be selected
  • For queries, members can contact: DL-SYSCYB@nse.co.in

Regulatory Changes

No new regulatory changes introduced. This circular reiterates obligations under:

  • SEBI Circular SEBI/HO/ITD-1/ITD_CSC_EXT/P/CIR/2024/113 dated August 20, 2024
  • NSE Circular NSE/INSP/63502 dated August 21, 2024 (Cyber Security & Cyber Resilience Framework)
  • NSE Circular NSE/INSP/66040 dated January 08, 2025 (SOP for Immediate Cyber Incident handling)

Compliance Requirements

  • Admin must assign the “ENIT New Trade” role to a designated officer in the Member Portal
  • Designated officer must log in, navigate to the Quarterly Report Submission section, and fill in required details
  • Members must declare whether any cyber breach was observed during the quarter
  • If a breach occurred (Yes), full incident details must be entered, a PDF generated, and uploaded
  • If no breach occurred (No), a Nil Submission must be checked and submitted
  • Non-submission or delayed submission will attract disciplinary action as per Annexure 1.2 of NSE Circular NSE/INSP/70746 dated October 10, 2025

Important Dates

  • Quarter covered: January 1, 2026 – March 31, 2026
  • Submission deadline: April 15, 2026

Impact Assessment

This is a routine periodic compliance obligation applicable to all NSE trading members and SEBI Regulated Entities. Non-compliance carries risk of penalties and disciplinary action as outlined in NSE/INSP/70746. There is no broader market or trading impact; however, members who have not yet set up ENIT portal access for their designated officer should do so immediately to avoid last-minute submission issues.

Impact Justification

Routine quarterly compliance requirement for trading members; failure to submit by deadline triggers disciplinary action and penalties, but no systemic market impact.