IFSCA has issued a new circular dated 27 October 2026, introducing mandatory NISM certifications on Cyber Security and Cyber Resilience for designated officers and specified employees of regulated entities in IFSCs.
Who needs to get certified?
Designated Officers: Basic and Advanced certifications are mandatory.
Compliance Officers: Basic certification is mandatory.
IT and Information Security Personnel: Basic certification is mandatory, including employees with privileged access to critical systems.
Other Employees: Basic certification is encouraged.
Important dates
18 November 2026: Basic certification examination goes live.
30 December 2026: Advanced certification examination goes live.
Eligible personnel must obtain the required certification within six months of the respective examination going live or their appointment to the relevant role, whichever is later. Regulated entities must maintain certification records and provide them to IFSCA when requested.
What should IFSC fund managers do now?
Identify the Designated Officer and employees covered by the mandate.
Map each role to its applicable certification.
Plan certification timelines and training.
Maintain certification records for regulatory inspection.
The circular reinforces the importance of cybersecurity awareness, governance and resilience across the GIFT IFSC financial ecosystem.
Read the circular and find registration details through the NISM certification course page.