Which of the following statements is/are correct?

A. SEBI stated that the new framework would supersede nearly 15 circulars issued separately for various segments since 2015.

B. SEBI noted that the new consolidated framework has been based on five concurrent and continuous functions of cybersecurity, namely: identify, protect, detect, respond, and rescue.

C. Under the proposed framework, Market Infrastructure Institutions like stock exchanges and depository participants will be required to conduct a cyber-audit thrice a year while all other regulated entities will have to do it once each year.