Cybersecurity Risk Management and Strategy Disclosure |
12 Months Ended |
|---|---|
Mar. 31, 2026 | |
| Cybersecurity Risk Management, Strategy, and Governance [Line Items] | |
| Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block] | Sify Technologies Limited and its subsidiaries have processes in place for assessing, identifying, and managing material risks from potential unauthorized access to its information systems that could adversely affect the confidentiality, integrity, or availability of the information systems or the information stored on those systems. These include a wide variety of mechanisms, controls, technologies, methods, systems, and other processes that are designed to prevent, identify, detect, recover & respond, or mitigate data loss, theft, misuse, unauthorized access, or other security incidents or vulnerabilities affecting the data.
From a business perspective, this means protecting key information assets and complying with applicable international and national data privacy and protection laws, information security policies and contractual obligations. The Company’s Information Security Policy, adopted in information security management objectives and principles, and the Data Protection Policy, provides for a consistent level of enterprise-wide data protection. The data includes confidential, proprietary, business and personal information that is collected, processed, stored, and transmitted as part of business, including on behalf of .
The organization policies are applicable to Sify Technologies and its subsidiaries and are part of the overall Information Security Management System (ISMS) that is currently being operationalized. Processes for assessing, identifying, and managing material risks from cybersecurity threats are , which is developed with input from internal and external experts. The company collaborates with external experts to maintain our security posture and conduct periodic vulnerability assessment and penetration testing done. The main cyber and information security objectives are to maintain information confidentiality, integrity, and availability.
As part of the risk management process, we conduct application security assessments, vulnerability management, penetration testing, security audits, and ongoing risk assessments. The organization has a robust incident response process which includes identify, detect, reporting, response and recover process to comply with various regulatory requirements, when incidents are detected. All employees are required to mandatorily undertake data protection, security and compliance programs annually. Our senior leadership oversees our efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools (including AI-enabled security tools) deployed in our IT Systems environment.
In addition to the internal cybersecurity capabilities, as and when required, we also engage assessors, consultants, auditors, or other third parties to assist with assessing, identifying, and managing cybersecurity risks.
The cybersecurity risks and associated mitigations which forms part of our enterprise risk assessment are evaluated by Chief Information Officer, and reviewed by the Audit Committee. Such risks and mitigations are also subject to oversight by our Board of Directors.
During the year ending March 31, 2026, the us, but we face certain ongoing risks from cybersecurity threats that, if realized, are reasonably likely to affect us which can be referred in the “Risks Related to our Company and Industry” section under heading "Cybersecurity threats could damage our reputation or result in liability to us” |
| Cybersecurity Risk Management Processes Integrated [Flag] | true |
| Cybersecurity Risk Management Processes Integrated [Text Block] | The organization policies are applicable to Sify Technologies and its subsidiaries and are part of the overall Information Security Management System (ISMS) that is currently being operationalized. Processes for assessing, identifying, and managing material risks from cybersecurity threats are , which is developed with input from internal and external experts. The company collaborates with external experts to maintain our security posture and conduct periodic vulnerability assessment and penetration testing done. The main cyber and information security objectives are to maintain information confidentiality, integrity, and availability.
As part of the risk management process, we conduct application security assessments, vulnerability management, penetration testing, security audits, and ongoing risk assessments. The organization has a robust incident response process which includes identify, detect, reporting, response and recover process to comply with various regulatory requirements, when incidents are detected. All employees are required to mandatorily undertake data protection, security and compliance programs annually. Our senior leadership oversees our efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools (including AI-enabled security tools) deployed in our IT Systems environment. |
| Cybersecurity Risk Management Third Party Engaged [Flag] | true |
| Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] | true |
| Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] | false |
| Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Text Block] | During the year ending March 31, 2026, the us, but we face certain ongoing risks from cybersecurity threats that, if realized, are reasonably likely to affect us which can be referred in the “Risks Related to our Company and Industry” section under heading "Cybersecurity threats could damage our reputation or result in liability to us” |
| Cybersecurity Risk Board of Directors Oversight [Text Block] | The cybersecurity risks and associated mitigations which forms part of our enterprise risk assessment are evaluated by Chief Information Officer, and reviewed by the Audit Committee. Such risks and mitigations are also subject to oversight by our Board of Directors. |
| Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] | The cybersecurity risks and associated mitigations which forms part of our enterprise risk assessment are evaluated by Chief Information Officer, and reviewed by the Audit Committee. |
| Cybersecurity Risk Management Positions or Committees Responsible [Flag] | true |
| Cybersecurity Risk Management Positions or Committees Responsible [Text Block] | In addition to the internal cybersecurity capabilities, as and when required, we also engage assessors, consultants, auditors, or other third parties to assist with assessing, identifying, and managing cybersecurity risks.
The cybersecurity risks and associated mitigations which forms part of our enterprise risk assessment are evaluated by Chief Information Officer, and reviewed by the Audit Committee. Such risks and mitigations are also subject to oversight by our Board of Directors.
During the year ending March 31, 2026, the us, but we face certain ongoing risks from cybersecurity threats that, if realized, are reasonably likely to affect us which can be referred in the “Risks Related to our Company and Industry” section under heading "Cybersecurity threats could damage our reputation or result in liability to us” |