---
title: "Strengthening Cybersecurity: MCX Updates SOP for Handling Cybersecurity Incidents"
date: 2025-01-10
author: "Rahul Sundaram"
url: https://www.indialaw.in/blog/civil/mcx-updates-sop-cybersecurity-incidents/
---

# Strengthening Cybersecurity: MCX Updates SOP for Handling Cybersecurity Incidents

Posted On - 10 January, 2025 •

By - [Rahul Sundaram](https://www.indialaw.in/people/rahul-sundaram/ "Posts by Rahul Sundaram")

[![Strengthening Cybersecurity: MCX Updates SOP for Handling Cybersecurity Incidents](https://www.indialaw.in/wp-content/uploads/4610993.jpg)](https://www.indialaw.in/wp-content/uploads/4610993.jpg)

The Multi Commodity Exchange of India Limited (MCX) has issued a revised Standard Operating Procedure (SOP) for managing cybersecurity incidents vide a circular dated January 8,2025. This updated SOP aligns with the Securities and Exchange Board of India (SEBI)’s Cybersecurity and Cyber Resilience Framework (CSCRF) as outlined in the SEBI circular dated August 20, 2024. It sets clear directives and timelines for incident reporting and management, aiming to bolster the security framework for regulated entities (REs), members, and depository participants (DPs).

## Background and Objective

Cybersecurity threats have been a growing concern for financial markets globally, and the revised SOP by MCX is a proactive step to mitigate these risks. The framework updates prior guidelines issued in 2021 and reflects the latest SEBI circular requirements. The SOP emphasizes timely reporting, stringent mitigation measures, and detailed post-incident evaluations to ensure that all stakeholders follow a robust and unified approach to managing cybersecurity incidents.

The SOP aims to protect trading networks, prevent lateral threat movements, and enhance the overall cyber resilience of SEBI-regulated entities.

## Key Provisions of the SOP

1. **Mandatory Incident Reporting**:
  - REs, members, and DPs must report cybersecurity incidents within **6 hours** of detection or notification. This ensures swift containment and limits potential damage.
  - In cases where submission through SEBI or exchange portals is not possible, entities can report via email to designated group IDs.
2. **Classification and Containment**:
  - Incidents are classified into Critical, High, Medium, and Low categories based on severity.
  - For incidents classified as Critical or High, connectivity between affected entities and exchanges/depositories may be disabled until a certified report confirms risk mitigation.
3. **Post-Incident Submissions**:
  - Entities must submit various reports, including immediate, interim, and root cause analysis (RCA) reports, within stipulated timelines.

---

## Timelines for Post-Incident Reporting

MCX has established the following timelines to ensure the prompt and structured handling of cybersecurity incidents:

| **Report/Activity** | **Timeline for Submission** |
| --- | --- |
| **Immediate Cyber Incident Reporting** | Within **6 hours** |
| **Immediate Mitigation Measure Report** | **Same day** |
| **Interim Report** | **T + 3 Days** |
| **Mitigation Measure Report** | **T + 7 Days** |
| **Root Cause Analysis (RCA) Report** | **T + 30 Days** (extensions in special cases) |
| **Forensic Audit Report (if required)** | **Maximum 75 Days** |
| **Vulnerability Assessment & Penetration Testing (VAPT) Report** | **T + 45 Days** |

(*T refers to the date of detection or notification of the incident.*)

---

## Compliance and Penalty Framework

Failure to adhere to the specified timelines could result in penalties. For instance, delays in reporting incidents, submitting RCA reports, or forensic audit findings could attract fines of up to ₹10 lakhs per incident for larger entities. Repeat or significant non-compliance could lead to trading restrictions or suspension of connectivity.

---

## Conclusion

The updated SOP reflects the increasing importance of cybersecurity in protecting financial markets. By setting stringent timelines and detailed reporting protocols, MCX aims to ensure rapid incident resolution and minimize disruptions. This framework underscores the commitment of market infrastructure institutions to maintaining robust cyber defenses while fostering trust among stakeholders. It is now imperative for regulated entities to fully comply with the SOP to avoid penalties and contribute to the resilience of India’s financial ecosystem.

With the implementation of this SOP from January 20, 2025, MCX and its participants take a significant step forward in strengthening the cybersecurity posture of the Indian financial markets.

Disclaimer - This article is intended for general informational purposes and does not constitute legal advice. Readers should seek specific legal counsel in relation to their individual circumstances.

[Download PDF](https://www.indialaw.in/blog/civil/mcx-updates-sop-cybersecurity-incidents//pdf/)

---

# IndiaLaw LLP — Offices & Contact Details

---

## General Contact

| | |
|---|---|
| **Website** | https://www.indialaw.in |
| **Primary email** | contact@indialaw.in |
| **Primary phone** | +91 836-9995919 |
| **Contact form** | https://www.indialaw.in/connect/ |
| **Careers (separate channel)** | https://www.indialaw.in/careers/ |


---

## All Offices (9 locations across 8 cities)

### 1. Mumbai — Registered Office & Head Office (Apeejay Chambers)

| | |
|---|---|
| **Address** | Apeejay Chambers, Ground Floor, Wallace Street, Fort, Mumbai – 400 001 |
| **Phone** | [022-6924-7400](tel:02269247400) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/mumbai/ |
| **Practice focus** | Litigation · Arbitration · Insolvency & Bankruptcy · Corporate · Banking · Real Estate · IP |
| **Notes** | The HQ. 5 partners based here. Handles PAN-India litigation, arbitration, corporate, banking, IP and real estate practice. Largest team across all offices. |

### 2. Mumbai — Non-Litigation Office (Excelsior, Fort)

| | |
|---|---|
| **Address** | 4th Floor, New Excelsior Theatre Pvt. Ltd., Amrit Keshav Nayak Marg, Fort, Mumbai – 400 001 |
| **Phone** | [022-697-40500](tel:022-697-40500) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/mumbai/ |
| **Practice focus** | Non-litigation only — consultations, negotiations, transactional work |
| **Notes** | Opened 2024. Litigation and arbitration remain at the Apeejay Chambers head office. |

### 3. Delhi

| | |
|---|---|
| **Address** | Flat No. 1107 & 1108, Prakashdeep Building, Tolstoy Marg, Connaught Place, New Delhi – 110 001 |
| **Phone** | (general line: +91 836-9995919) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/delhi/ |
| **Practice focus** | Litigation · Arbitration · Insolvency & Bankruptcy · Corporate · Banking · Real Estate |
| **Notes** | 3 partners based here. Located near the Supreme Court of India, Delhi High Court and other appellate bodies. |

### 4. Kolkata

| | |
|---|---|
| **Address** | Centre Point Building, Room No. 214, 2nd Floor, Premises No. 21, Hemanta Basu Sarani, Opp. Great Eastern Hotel, P.S. Hare Street, Kolkata – 700 001, West Bengal |
| **Phone** | [+91 33 4813 1001](tel:+913348131001) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/kolkata/ |
| **Practice focus** | Insolvency & Bankruptcy · Commercial & Civil Litigation · Arbitration · Banking Litigation · Real Estate · Labour & Employment · Consumer |
| **Notes** | Advises banks, NBFCs, MSMEs and corporates on transactions and dispute resolution. Works in close coordination with the Mumbai HO. |

### 5. Chennai

| | |
|---|---|
| **Address** | GF-A, 19 Casa Major Road, Egmore, Chennai – 600 008 |
| **Phone** | (general line: +91 836-9995919) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/chennai/ |
| **Practice focus** | Litigation · Insolvency & Bankruptcy · Real Estate |
| **Notes** | Full-fledged office with experienced legal team. Supported by Mumbai HO. |

### 6. Bengaluru (Bangalore)

| | |
|---|---|
| **Address** | INDIALAW LLP, No. 7 Chinnaswamy Mudaliar Road, Shivaji Nagar, Bangalore – 560 051 |
| **Phone** | [080-4167-2444](tel:08041672444) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/bengaluru/ |
| **Practice focus** | Litigation · Insolvency & Bankruptcy · Real Estate · Family Laws · Labour |
| **Notes** | Located near Bangalore High Court. Handles corporate, commercial, banking and matrimonial disputes. |

### 7. Hyderabad

| | |
|---|---|
| **Address** | 403, 4th Floor, Sanatana Ecstasy Building, beside Tanishq Show Room, Himayathnagar, Hyderabad – 500 029, Telangana |
| **Phone** | [040-6666-5166](tel:04066665166) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/hyderabad/ |
| **Practice focus** | Litigation · Banking · Insolvency & Bankruptcy · Real Estate |
| **Notes** | Particularly well known for complex banking matters and real estate transactions. |

### 8. Cochin (Kochi)

| | |
|---|---|
| **Address** | Second Floor, Pulikkal Building, K.K. Padmanabhan Road, Ernakulam North – 682 018, Kerala |
| **Phone** | [0484-3583961](tel:04843583961) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/cochin/ |
| **Practice focus** | Litigation · Insolvency & Bankruptcy · Real Estate |
| **Notes** | Commercial disputes, property litigation, financial-claim arbitrations and real estate transactions. |

### 9. Noida (NCR)

| | |
|---|---|
| **Address** | No. 16 & 17, Silver Offices, 17th Floor, Wave One, Sector 18, Noida – 201 301 |
| **Phone** | (general line: +91 836-9995919) |
| **Email** | contact@indialaw.in |
| **Page** | https://www.indialaw.in/noida/ |
| **Practice focus** | Aviation · Insurance · Mergers & Acquisitions · Corporate |
| **Office head** | **Mr. Dinesh Gupta** (joined August 2025 to lead and expand the corporate practice) |
| **Notes** | Newest office. Sector-focused on highly regulated industries serving NCR-based clients. |

---

## Quick-Dial Phone List

| Office | Phone |
|---|---|
| Mumbai HO (Apeejay) | 022-6924-7400 |
| Mumbai Excelsior | 022-697-40500 |
| Kolkata | +91 33 4813 1001 |
| Bengaluru | 080-4167-2444 |
| Hyderabad | 040-6666-5166 |
| Cochin | 0484-3583961 |
| **General / Marketing line** | **+91 836-9995919** |

Delhi, Chennai and Noida route through the general number.

---

## Social Channels

- LinkedIn: https://www.linkedin.com/company/indialaw
- X / Twitter: https://twitter.com/Indialawmumbai
- Facebook: https://www.facebook.com/indialawllp/
- Instagram: https://www.instagram.com/indialawllp

---