SEBI’s ITRI — a global test for India’s future-ready financial architecture | Explained

The introduction of the ITRI highlights the critical link between technology and financial stability in modern capital markets. Market Infrastructure Institutions (MIIs), which include stock exchanges, clearing corporations, and depositories, are designated as systemically important because their failure can disrupt the entire financial ecosystem. The ITRI shifts the regulatory paradigm from a qualitative, compliance-based approach to a quantitative risk-monitoring framework. By assigning specific weights to parameters like 'Availability and Security' (20%) and 'Business Continuity and Reliability' (10%), SEBI aims to create a measurable barometer of resilience, similar to capital adequacy ratios used for banks under Basel III norms. This is crucial given the surge in retail participation, algorithmic trading, and faster settlement cycles (like T+0), which significantly increase the technological load on MIIs. A failure here is no longer just an IT issue; it translates directly into a financial stability risk.

From a regulatory governance perspective, the ITRI represents a proactive approach to risk management. Unlike the European Union's Digital Operational Resilience Act (DORA), which is a comprehensive rulebook, SEBI's ITRI is a unique attempt to convert operational resilience into a numerical score. This allows for standardized assessment and comparison across different institutions. The framework mandates the development of an Early Warning System (EWS) to detect deteriorating IT parameters before they lead to actual system failures. This demonstrates a shift from reactive problem-solving to proactive resilience—focusing on absorbing shocks and ensuring quick recovery rather than merely trying to prevent failures. However, governance challenges remain, particularly in standardizing the index across MIIs with diverse technological architectures and ensuring the regulatory framework keeps pace with rapidly evolving technology risks.

The ITRI underscores the growing importance of Cyber Security and robust IT infrastructure in the financial sector. With increasing reliance on complex technologies like artificial intelligence (AI), cloud computing, and high-frequency trading, the attack surface for cyber threats has expanded significantly. The index emphasizes parameters like 'Scalability' (5%), acknowledging the rapid growth of Indian markets, while prioritizing 'Availability and Security' to protect against operational shocks and cyberattacks. SEBI's long-term roadmap also anticipates the integration of emerging technologies like Distributed Ledger Technology (DLT) and quantum-safe systems, highlighting the need for future-ready infrastructure. The true test of the ITRI will be its effectiveness in facilitating faster recovery during an actual cyber incident, reflecting a mature operational resilience strategy.