SEBI released the 'Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities (REs) on August 20, 2024, and the framework for adoption of cloud services on March 06, 2023. Release of the FAQs (dated June 11, 2025) arose directly from queries, suggestions, and consultations held with REs, highlighting areas where further clarity was needed regarding both the CSCRF and the Framework for Adoption of Cloud Services. The FAQs cover a comprehensive range of themes across 17 key areas, including governance, asset classification, patch management, SOC operations, data security, and incident response.

Based on the very initial reading and comprehension of the document the intent of this note is to summarize and interpret key elements of the FAQs and identify areas which may further require regulatory guidance and clarification.