IRDAI Compliance Audit
Meet IRDAI's cyber-governance and audit regime for insurers and intermediaries.
IRDAI Guidelines Gap
Against the 2023 cyber-security guidelines
Annual Cyber & IS Audit
Cyber and information-systems audit
IRDAI-Format Report
Report with 90-day filing support
CERT-In Auditors
A qualified, CERT-In-aligned team
What it is
The IRDAI Information and Cyber Security Guidelines, 2023 set a mandatory cyber-governance and audit regime for India's insurance sector. Regulated entities must appoint a CISO, establish board oversight and perform annual VAPT and IS audits via CERT-In empanelled auditors.
Who must comply
All insurers (life, general, health, reinsurers) plus intermediaries, brokers, corporate agents, web aggregators, TPAs, insurance repositories, ISNPs, surveyors and more.
How IntelligenceX helps
Frequently Asked Questions
Every IRDAI-regulated entity, including insurers, reinsurers, brokers, TPAs, web aggregators, corporate agents and ISNPs. If you are licensed by IRDAI and handle policyholder or claims data, the 2023 guidelines apply.
The audit report must be filed within 90 days of fiscal-year end or 30 days of audit completion, whichever is earlier. Plan the audit early in Q1 of the new fiscal year.
Both. The 2023 guidelines apply across the sector: insurers, reinsurers, brokers, corporate agents, web aggregators, TPAs and ISNPs. If you are IRDAI-licensed and handle policyholder or claims data, the cyber-governance and audit regime applies.