IRDAI Information & Cyber Security Guidelines
Requires insurers and intermediaries to run a board-approved information and cyber security policy, appoint a CISO, perform periodic risk assessments and VAPT, maintain a cyber crisis management plan, and report incidents to CERT-In and the regulator within prescribed timelines.