The National Stock Exchange (NSE) on May 10, 2024, issued a notification regarding the Revision in Terms of Reference (TOR) for submission of system audit report & additional submission of Vulnerability Assessment and Penetration Testing (VAPT) report for Vendors providing Co-Location as a Service (CaaS) facility.
Report 1: System Audit Report - CaaS Vendors of the Exchange are required to submit the report to the Exchange as per the latest Terms of Reference (TOR) enclosed as Annexure A.
Report 2: Vulnerability Assessment and Penetration Testing (VAPT) report - VAPT should be conducted on a Half Yearly basis by the 'CERT-In' empanelled entity & VAPT report is to be submitted to Exchange within 30 days of completion of the assessment. Any gaps identified in VAPT should be remedied on an immediate basis and the status of closure of findings should be submitted to Exchange within 3 months of submission of the VAPT report.
CaaS vendors are required to submit both reports to the Exchange as per the timelines mentioned in the document attached.
[Notification No. NCL/MSD/61978]
