Who Requires an IRDAI ISNP Security Audit?
ISNP requirements apply to insurers and permitted intermediaries selling or servicing insurance through their own online platforms.
Life Insurers
General Insurers
Health Insurers
Insurance Brokers with ISNP
Corporate Agents with ISNP
Entities Registering a New ISNP
Our IRDAI ISNP Security Audit Approach
A structured audit of your ISNP platform, infrastructure and policyholder data controls.
Deliverables You Can Expect
Audit outputs for your compliance team, board and IRDAI file.
ISNP Security Audit Report
Findings across platform, infrastructure and data controls
Vulnerability Findings & Evidence
Tested weaknesses rated by severity with evidence
Executive Summary
Board-level view of ISNP security posture
Benefits of IRDAI ISNP Security Audits
Safer Online Sales
Web and app weaknesses found before attackers do
Policyholder Data Protection
Data handling gaps identified and prioritized
Reduced Regulatory Risk
Gaps closed before IRDAI reviews them
Launch Readiness
Security checked before new ISNP go-live
Board-Ready Reporting
Clear view of platform security for leadership
Customer Trust
Independent evidence of secure online channels
Why Insurers Choose QRC
IRDAI-focused expertise. Application security depth. Actionable, audit-ready outcomes.
Audits aligned to IRDAI's ISNP and information security requirements.
Combined review of governance, security controls, infrastructure and operational practices.
QRC Assurance and Solutions is listed by CERT-In as an empanelled information security auditing organization.
Experience across IRDAI, DPDP, PCI DSS and ISO 27001 requirements.
Supporting Services
Services that complement your ISNP audit across application testing and insurance compliance.
Web Application Security (WAPT)
Tests ISNP websites and portals for exploitable weaknesses.
Learn More
IRDAI Cybersecurity Audit
Audit against IRDAI's information and cyber security guidelines.
Learn More
DPDP Compliance Assessment
Assesses policyholder data obligations under India's DPDP Act.
Learn MoreReal-World ISNP Security Audit Outcomes
How insurers and intermediaries have used QRC audits to secure their ISNP platforms.
ISNP Security Resource Center
Practical resources to help insurers understand ISNP security requirements.
IRDAI Issues Revised Information and Cyber Security Guidelines’23
The Insurance Regulatory and Development Authority of India (IRDAI) recently issued revised Information and Cyber Security Guidelines “IRDAI Information and…
Frequently Asked Questions
An Insurance Self-Network Platform is an electronic platform, such as a website or mobile app, set up by an insurer or permitted intermediary with IRDAI's permission to sell and service insurance online.
Insurers and intermediaries operating an ISNP, and entities preparing to register one, as required under IRDAI's ISNP requirements and their own security policies.
Web and mobile application security, APIs, hosting infrastructure, policyholder data protection, and monitoring and incident response for the platform.
No. The ISNP audit focuses on your online insurance platform. The IRDAI cyber security audit covers your wider organization against IRDAI's information and cyber security guidelines.
QRC is a CERT-In empanelled auditor. The auditor qualifications IRDAI requires for your ISNP are confirmed during scoping.
Timing depends on the entities, systems and locations in scope and how readily evidence is available. QRC confirms a realistic timeline after the scoping call.
Ready to Secure Your ISNP Platform?
Define your scope, identify priority gaps and prepare for IRDAI review.