IRDAI Information and Cyber Security Guidelines, 2023

Insurance Regulatory and Development Authority of India

Reference No.: IRDAI/GA&HR/GDL/MISC/88/04/2023 Date: 24/04/2023

To,
All Insurers, Insurance Intermediaries and IIB,

SUB: IRDAI Information and Cyber Security Guidelines, 2023.

1. IRDAI vide Circular ref: IRDAI/IT/GDL/MISC/082/04/2017 dated 07^th Apr, 2017 has issued guidelines on Information and Cyber Security for Insurers, which were later extended to all Insurance Intermediaries vide Circular ref: IRDA/GA&HR/GLD/MISC/184/09/2022 dated 02^nd Sep, 2022.

2. Considering the wide-spread adoption of digital technologies and the concurrent increase in cyber security incidents, the revised Guidelines are hereby issued in order to enable the insurance industry to strengthen their defenses as well as related governance mechanism to deal with such emerging cyber threats.

3. The IRDAI Information and Cyber Security Guidelines, 2023 are attached as Annexure – A.

4. All Insurers including FRBs, Insurance Intermediaries covering Brokers, Corporate Agents, Web Aggregators, TPAs, IMFs, Insurance Repositories, ISNP, Corporate Surveyors, MISPs, CSCs and Insurance Information Bureau of India (IIB) shall adhere to the said Guidelines. Those entities who have already completed security audit for FY 2022-23 shall ensure compliance with these guidelines from next financial year.

5. The IRDAI Circular ref: IRDAI/IT/GDL/MISC/082/04/2017 dated 07^thApr, 2017, Circular ref: IRDA/IT/CIR/MISC/301/12/2020 dated 29^th Dec, 2020, Circular ref: IRDA/GA&HR/GLD/MISC/184/09/2022 dated 02^nd Sep, 2022 and Circular ref: IRDAI/GA&HR/GDL/MISC/211/10/2022 dated 11.10.2022 are superseded by these guidelines.

   (P.S. Jagannatham)

 Chief General Manager (Admin & HR)