SEBI MII Governance Consultation 2026: Director Eligibility, CTO-CISO Standards and 30 September Deadline
SEBI’s governance proposal treats technology, cyber security, compliance and risk leadership as core market-infrastructure responsibilities—not support functions.
Direct answer
SEBI published a consultation paper on 9 September 2026 proposing changes to director-eligibility criteria for Market Infrastructure Institutions and a formal Standard Operating Procedure for qualifications, experience, skills and certifications of critical KMP roles.
Use the official SEBI consultation page and SEBI’s public-comments portal. The Best CS Firm In India governance approach is to map each proposal to a role, board process, recruitment control and evidence owner before the consultation closes.
What the consultation covers
| Proposal | Governance purpose | Operational impact |
|---|---|---|
| Review director eligibility | Manage conflicts involving trading or clearing members and associates | Deeper relationship and independence checks |
| SOP for specific KMPs | Set minimum competence for critical roles | Documented qualification, experience, skills and certification criteria |
| Vacancy planning | Reduce prolonged gaps in critical leadership | Succession pipeline, deputies and time-bound hiring |
| Board-approved framework | Make governing board accountable for standards | Committee input, approval records and periodic review |
Roles affected
- Chief Technology Officer.
- Chief Information Security Officer.
- Compliance Officer.
- Chief Risk Officer.
- Directors and nomination teams assessing governing-board eligibility.
Action checklist before 30 September 2026
- Read the official paper and identify the proposals relevant to your entity or client relationship.
- Compare current role descriptions and incumbents against proposed qualification and experience expectations.
- Map director, employer, group and member relationships that may affect eligibility.
- Review vacancy, succession, deputy and interim-control arrangements for critical KMP posts.
- Prepare evidence-backed comments on proportionality, talent availability, certification and transition time.
- Submit comments through SEBI’s official portal by the stated deadline.
- Track the final framework and record implementation decisions only after it is issued.
Documents to prepare
| Document | Why it matters | Owner |
|---|---|---|
| Director eligibility matrix | Maps relationships, conflicts and independence evidence | Secretarial/legal |
| KMP competency framework | Connects each role to qualifications, skills and certifications | Board/HR |
| Succession and vacancy plan | Shows deputies, recruitment timing and interim controls | NRC/management |
| Role and reporting map | Clarifies authority, escalation and committee access | Board secretariat |
| Fit-and-proper evidence | Supports appointment and continuing eligibility review | Compliance |
| Consultation response file | Retains proposal analysis, approvals and submission proof | Legal/compliance |
Impact on startups and vendors
Most startups are not MIIs, but fintech, cyber-security, governance and recruitment vendors should expect customers to strengthen leadership-assurance requirements. A vendor selling into an MII should be ready to explain its own key-person dependency, security leadership, escalation process, professional certifications and succession controls.
Mistakes to avoid
- Describing consultation proposals as binding obligations.
- Treating qualifications as a CV-only exercise without authority and reporting clarity.
- Ignoring indirect relationships that may affect director eligibility.
- Leaving succession planning until a critical role becomes vacant.
- Submitting generic feedback without operational evidence.
Founder / Business Takeaway
The proposal is a useful governance benchmark even beyond MIIs: critical technology, cyber, compliance and risk roles need explicit competence, independence, escalation authority and succession planning.
Free Weekly Newsletter
Subscribe to BSA startup funding alerts
- Every Sunday, all Indian startup funding alerts in one place
- Monthly funding report on the last day of the month
- Free, concise, founder-focused, and easy to unsubscribe
Get the complete Indian startup funding roundup in your inbox, covering deals, sectors, investor moves, and founder readiness notes from the week.
Built for founders, investors, CFOs, and advisors
No spam. Unsubscribe anytime.
Suggested internal links
FAQ
Is the September 2026 MII governance paper a final rule?
No. It is a consultation paper. Affected teams should assess and comment on the proposal while tracking the final SEBI instrument.
Which critical roles are covered by the proposed SOP?
The consultation addresses standards for the CTO, CISO, Compliance Officer and Chief Risk Officer of an MII.
When are public comments due?
The consultation materials state a public-comment deadline of 30 September 2026.
