White Papers

India's financial sector is operating in a fundamentally different compliance environment than it was 18 months ago. SEBI's Cybersecurity and Cyber Resilience Framework came into force on January 1, 2025, and the DPDP Act 2023 is now actively enforcing. For SEBI-regulated entities running Salesforce, the obligations now stretch well beyond internal security policy and into every vendor that processes their data.

In 2016, most enterprises treated Salesforce security as the vendor's problem. The platform was a CRM, the consequences of a governance failure were contained, and the conversation rarely reached the CIO. That model worked until it didn't.