Skip to main content

Firewall Policy

Dec 2025

  1. Statement of Purpose

    1. To ensure that BWR has separation of Fire wall practices with its non-rating entities which shall be documented in the Rating Process Manual (PM) of BWR and there is no conflict of interest between BWR and its non-rated entities.
    2. To determine the nature and extent of sharing of infrastructure, employees, resources, if any between BWR and its non-rating entity in a clear and transparent manner
    3. To ensure that BWR always renders high standards of service and exercises due diligence and ensures proper care in its operations to protect customer data and integrity of ratings process.
    4. The policy shall cover the measures taken by BWR to ensure that its rating activities/ process is independent to the arrangement with its non-rating entities.
    5. To provide guidance to its employees on sharing information or resources, if any, between BWR and its non-rating entity to avoid any conflict of interest
  2. Applicability of the Policy

    This policy shall be applicable to BWR and all its non-rating entities.

  3. Disclosure

    BWR shall upload this Policy on its website after Board approval. BWR shall disclose on its web site, details of Common Director/Chief Executive/Officer /Managing Director between BWR and its non- rating entities and the same shall be updated on the 1st working day of every month. The disclosure shall contain the details of last update along with a hyperlink to archives for the previous disclosure.

  4. Nature & Sharing of Infrastructure

    1. Human Resources:

      BWR maintains the required separation between its Ratings and non-rating entities in terms of human resources, on permanent basis, as per SEBI code of Conduct. The 3 departments work exclusively for BWR and the employees in these departments will not be nominated as directors to the Board of the non- rating:

      • Rating Committees
      • Rating analytical team
      • Rating Administration
      • Compliance team

      The following corporate functions are shared by the rating and non-rating entities on a permanent basis:

      • Finance
      • Human Resources
      • IT infrastructure & systems support
      • Business Development
      • Digital Marketing
      • Facilities and Admin
      • Consultants not handling core activities of BWR
    2. Office Space & IT infrastructure

      • BWR has a separate office space for exclusive use of its employees. This work area has restricted biometric and electronic entry for their employees, and the attendance server is separately hosted
      • Assets such as laptops and desktops are procured and utilized specifically for BWR
      • Email & file storage services are separately hosted
      • Application Hosting: BWR has hosted its rating workflow software application on a dedicated server to which only BWR employees have access to this Shared drives access is given only to respective teams only and the data sharing is blocked from the Shared drive
      • BWR and its non-rating entities may share the internet provided by a common internet provider but access the internet with separate Wi-Fi SSID
  5. Implementation of independence from non-rating entities

    1. BWR will treat its non-rating entities as it would any other 3rd  party.
    2. BWR non-rating entities shall not use the credit rating scales and symbols prescribed by SEBI for the Credit Rating Agencies (CRA’s) in their  activities.
    3. BWR employees shall be given training sessions to educate them on adherence to this  policy.
  6. Monitoring By the Internal Auditor

    The implementation of the above policy shall be monitored by the Internal auditor and commented in their Half yearly report.

  7. Policy Review

    This Firewall Policy is based on the SEBI circulars below:

    1. SEBI CIR/MIRSD/24/2011 December 15, 2011,
    2. SEBI/MIRSD/DOS3/CIR/P/2018/130 19.09.2018 and
    3. SEBI/HO/DDHS-RACPOD2/P/CIR/2022/121 dt 09.2022
    4. SEBI/HO/DDHS/DDHS-POD3/P/CIR/2024/47 dt. 16/05/2024
    5. SEBI/HO/DDHS/DDHS-POD2/P/CIR/2025/101 dt 07.2025

    This Policy shall be reviewed by the Compliance department as and when any changes are to be incorporated in the policy due to changes in the Act, Regulations, Guidelines or Circulars.


Details
Document Title Firewall Policy
Primary Owner Compliance Department
Review frequency Need basis.
Effective Date 11th December 2025
Version 2.0
Review Cycle of the Document Once in three (3) years and on a need basis
Version History Adoption/ Amendment  date Effective date Prepared by Approved  by
1.0 July 2023 January 2023 Compliance Department Board of Directors