What are the five cyber resiliency goals adopted from the Cyber Crisis Management Plan (CCMP) of CERT-In under SEBI's Cyber Security and Cyber Resilience Framework (CSCRF)?

[ A ]Invest, Distribute, Liquidate, Benchmark, and Rebalance

[ B ]Advertise, Empanel, Commission, Certify, and Disclose

[ C ]Nominate, Transmit, Pledge, Transfer, and Rematerialize

[ D ]Anticipate, Withstand, Contain, Recover, and Evolve[ CORRECT ]

Takeaway

Option D is correct: Anticipate, Withstand, Contain, Recover, and Evolve

Derivation

SEBI's Cyber Security and Cyber Resilience Framework (CSCRF) sets standards for regulated entities based on five fundamental cyber resiliency goals formulated by CERT-In: (1) Anticipate (identify threats), (2) Withstand (defend operations), (3) Contain (limit blast radius during incidents), (4) Recover (restore core systems), and (5) Evolve (learn and upgrade posture). This question tests regulatory technology and cybersecurity governance standards. A common pitfall is confusing cybersecurity goals with fund accounting or transaction lifecycle steps.

Why the others fail

A — Invest, Distribute, Liquidate, Benchmark, and Rebalance

Invest, Distribute, Liquidate, Benchmark, and Rebalance represent portfolio management stages, not cybersecurity frameworks.

B — Advertise, Empanel, Commission, Certify, and Disclose

Advertise, Empanel, Commission, Certify, and Disclose represent distributor lifecycle functions rather than cyber resilience goals.

C — Nominate, Transmit, Pledge, Transfer, and Rematerialize

Nominate, Transmit, Pledge, Transfer, and Rematerialize are investor servicing processes, not cybersecurity principles.