The National Stock Exchange of India (NSE) on April 26, 2023, issued a notification regarding the Periodic submission of System Audit of Application Service Provider (ASP).
The following has been stated namely: -
• Empaneled ASPs of the Exchange are required to carry out an Annual system audit of the (Non-NEAT Frontend) NNF facility & also conduct an additional system audit w.r.t. security controls built in their ASP platform
• Report 1: For the Annual System Audit of the NNF facility, empaneled ASPs of the Exchange are required to submit the report to the Exchange as per the latest Terms of Reference (TOR) applicable for Type II Members audited by CISA/CISSP/CISM/DISA certified auditor.
• Report 2: For submission of additional system audit w.r.t. security controls built in the ASP platform and as a part of Regulatory requirements, ASPs are required to follow auditor selection norms and provide the following information:
1. Details regarding the security controls built in the ASP platform for each version/instance (to be provided in a tabular format).
2. Findings/Observations reported by the auditor are to be submitted in the prescribed format
• ASP shall submit both reports to the Exchange every year for the period April to March. This certificate along with the original audit report and/or re-confirmatory audit report shall be submitted to the Exchange in accordance with the prescribed timelines.
• Submission of the system audit report shall be considered complete only after ASP submits the report to the Exchange after providing management comments.
• ASPs may submit both the aforesaid audit reports for the period April 2022 to March 2023 and henceforth within the timelines to avoid any penal/disciplinary action, as prescribed by the Exchange from time to time.
[Notification No. NSE/MSD/56491]
