NISM Cybersecurity Courses have been launched to improve cybersecurity awareness and cyber resilience among professionals working in the Gujarat International Finance Tec-City International Financial Services Centre (GIFT IFSC). The National Institute of Securities Markets (NISM) introduced two certification programmes on 12 October 2026 in partnership with the International Financial Services Centres Authority (IFSCA).

The programmes were launched by NISM Director Sashi Krishnan and IFSCA Chairperson K. Rajaraman. They aim to help professionals understand cyber threats, manage digital risks and strengthen security practices in the financial services sector. GIFT IFSC is located in Gandhinagar, Gujarat, and serves as a centre for international financial services in India.

NISM Cybersecurity Courses: Basic and Advanced Certifications

NISM has introduced two separate certifications under the new programme. They are designed for different levels of cybersecurity knowledge and responsibility.

The first is NISM-IFSCA-02A, the Basic Certification, which focuses on the main concepts of cybersecurity and cyber-risk management. It is scheduled to take effect from 18 November 2026.

The second is NISM-IFSCA-02B, the Advanced Certification, which covers more detailed areas of cybersecurity governance, incident preparedness and regulatory requirements. This programme is scheduled to take effect from 30 December 2026.

Both courses focus on the cybersecurity needs of the GIFT IFSC ecosystem. Their separate levels allow participants to develop knowledge ranging from basic security awareness to more advanced risk management and resilience practices.

What Is Covered in the Basic Certification?

The Basic Certification introduces participants to important cybersecurity concepts and the methods used to protect digital systems. It covers several areas that are relevant to financial institutions and service providers.

The curriculum includes cyber threats, governance and risk management, security architecture, asset management and access control. These subjects help participants understand how digital systems can be protected and how access to sensitive information should be managed.

The course also covers third-party risk, application security and data security. Financial organisations often work with external service providers and digital platforms, so weaknesses in one part of a system can affect other connected organisations.

Another important area is vulnerability management. This involves identifying weaknesses in software, systems and networks and taking steps to reduce the risk of cyberattacks.

The programme also introduces cyber hygiene, which includes safe digital practices such as using strong passwords, updating software and recognising suspicious messages. Incident response and recovery are included to help participants understand how organisations can respond when a cyber incident occurs and restore affected systems.

The curriculum also introduces cybersecurity challenges associated with artificial intelligence (AI) and quantum computing. As technology develops, financial institutions need to consider new risks involving automated systems, data protection and future computing capabilities.

Basic Certification Examination Details

The Basic Certification examination contains 50 questions, with one mark for each question. Candidates have 60 minutes to complete the examination and must score at least 50 per cent to pass.

The examination fee is ₹1,180, including taxes. The certificate remains valid for two years.

These requirements provide a structured way for participants to demonstrate their understanding of the main cybersecurity principles covered in the programme.

What Is Covered in the Advanced Certification?

The Advanced Certification builds on existing cybersecurity knowledge and focuses on more detailed security responsibilities. It is intended to develop a stronger understanding of how organisations prepare for cyber incidents and maintain secure operations.

The curriculum includes cybersecurity governance, risk management and cyber-incident preparedness. These areas help organisations identify potential threats, establish security responsibilities and prepare procedures for responding to incidents.

Cyber resilience is another key subject. It refers to an organisation’s ability to prepare for, withstand, respond to and recover from cyber incidents while maintaining important services.

The Advanced programme also covers cybersecurity applications across key domains and regulatory requirements for entities operating in GIFT IFSC. Understanding these requirements is important because financial organisations must manage cyber risks while meeting the rules that apply to their operations.

Advanced Certification Examination Details

The Advanced Certification examination consists of 80 multiple-choice questions and three case-based questions. Participants have two hours to complete it and must achieve a score of at least 60 per cent to pass.

The fee is ₹2,950, including taxes, and the certificate is valid for three years.

Compared with the Basic Certification, the Advanced programme has a higher passing requirement, a longer examination duration and case-based questions. These features assess participants’ knowledge as well as their ability to apply cybersecurity concepts to practical situations.

Why Cybersecurity Matters for Financial Services

Cybersecurity has become increasingly important as financial services depend on digital platforms, online transactions, cloud systems and electronic records. These technologies improve speed and convenience, but they can also expose organisations to risks.

Cyber threats may include phishing, ransomware, data theft, unauthorised access and attacks on computer networks. A successful attack can disrupt services, expose confidential information and create financial losses.

Financial institutions also handle sensitive customer and business data. Protecting this information requires secure systems, trained employees and clear procedures for identifying and managing risks.

Cyber resilience goes beyond preventing attacks. Organisations must also be prepared to respond quickly when an incident occurs, limit its impact and restore essential services. Training and certification can help professionals understand these responsibilities.

The growing use of AI in financial services adds another layer of complexity. AI can support data analysis and automation, but its use also raises questions about data security, system reliability and emerging cyber threats. The inclusion of AI and quantum computing in the Basic Certification reflects the need to understand changing technology-related risks.

Role of NISM and IFSCA

The National Institute of Securities Markets is an educational and capacity-building institution established by the Securities and Exchange Board of India (SEBI) in 2006. It supports learning and professional development in securities markets and related areas.

The International Financial Services Centres Authority is the unified regulator for financial products, services and institutions operating in India’s international financial services centres. Its legal framework was established under the International Financial Services Centres Authority Act, 2019.

GIFT IFSC, located in Gandhinagar, Gujarat, is part of Gujarat International Finance Tec-City. It provides a setting for international financial services and related business activities.

The partnership between NISM and IFSCA brings together financial-sector education and regulatory expertise. The new certifications are designed to strengthen knowledge of cybersecurity and cyber-risk management among professionals working within the IFSC environment.

Scheduled Launch Dates and Certification Validity

The two NISM Cybersecurity Courses have different commencement dates, examination formats and certificate validity periods.

The Basic Certification is scheduled to take effect on 18 November 2026, with a fee of ₹1,180 and a two-year certificate validity period. The Advanced Certification is scheduled to take effect on 30 December 2026, with a fee of ₹2,950 and a three-year validity period.

Both programmes focus on the security challenges faced by financial organisations and the importance of preparing for cyber incidents. By offering Basic and Advanced levels, NISM and IFSCA aim to support cybersecurity awareness and strengthen the ability of GIFT IFSC entities to manage digital risks.