Information Security News:

SEBI prescribes CISA audits for mutual fund players

By SearchSecurity.in Staff

01 Oct 2009 | searchSecurity.in

According to a recent circular from the Indian market regulator security exchange board of India (SEBI), mutual fund companies should conduct regular systems audits by an independent CISA/CISM qualified or equivalent auditor. Certified information systems auditor CISA) and certified information security manager (CISM) designations are globally respected information systems (IS) audit certifications from ISACA.

The circular further advises mutual fund organizations to conduct systems audit once in two years. Such system audit reports and compliance status should also be approved by the mutual fund company's trustees.

This is a welcome step by SEBI, considering the Indian financial sector's high dependence on inform

To continue reading for free, register below or login

Requires Membership to View

To gain access to this and all member only content, please provide the following information:

By joining searchSecurity.in you agree to receive email updates from the TechTarget network of sites, including updates on new content, magazine or event notifications, new site launches and market research surveys. Please verify all information and selections above. You may unsubscribe at any time from one or more of the services you have selected by editing your profile or unsubscribing via email.

TechTarget cares about your privacy. Read our Privacy Policy

Related Content

Related Resources

ation technology. The circular recommends that the systems audit should be comprehensive, encompassing various aspects such as audit of systems and processes related to integration of front office systems with the back office. The audit should also cover fund accounting systems for calculation of net asset values, financial accounting and reporting system for the asset management company, unit-holder administration and servicing systems for customer service, funds flow process, system processes for meeting regulatory requirements, prudential investment limits, and access rights to systems interfaces.

The systems audit report/findings along with trustee comments should be communicated to SEBI. For the financial year April 2008 - March 2010, the systems audit should be completed by September 30, 2010, the circular recommends.