This is with reference to SEBI Circular SEBI/HO/MIRSD/TPD/P/CIR/2022/80 dated June 07, 2022 (Anneuxre A), and Exchange Notice Reference 20220610-1 Dated 10 June 2022 (Annexure B) on “Modification in Cyber Security and Cyber resilience framework for Stockbrokers / Depository Participants”.
SEBI Circular SEBI/HO/MIRSD/TPD/P/CIR/2022/80 dated June 07, 2022, Para 42, prescribed that
“Stockbrokers / Depository Participants shall conduct VAPT at least once in a financial year. All Stockbrokers / Depository Participants are required to engage only CERT-In empanelled organizations for conducting VAPT. The final report on said VAPT shall be submitted to the Stock Exchanges / Depositories after approval from Technology Committee of respective Stockbrokers / Depository Participants, within 1 month of completion of VAPT activity…”
With respect to the above provision, Stock Exchanges in consultation with SEBI, hereby clarify that the VAPT shall be carried out and completed during the period September to November of every financial year and the final report on said VAPT shall be required to be submitted to the Stock Exchanges within one month from the date of completion of VAPT after approval from Technology Committee of respective Stockbrokers / Depository Participants.
Member brokers and Depository Participants are advised to take note of above and ensure compliance.
For and on Behalf of BSE
Shri. Devendra Kulkarni Shri. Shivkumar Pandey
Additional General Manager / ISMS CISO |