The National Stock Exchange (NSE) on September 12, 2024, notified regarding the submission of the VAPT Report and/or Action Taken Report (ATR)/Compliance Report.
The following has been stated namely: -
• Trading members are requested to conduct and complete the VAPT during the period September to November for FY 2024-25, and the final report after approval from the Technology Committee of respective members within one month from the date of completion of VAPT, shall be submitted through member portal to the Stock Exchange.
• Trading members shall conduct vulnerability assessment and penetration tests (VAPT) covering web and mobile applications, infrastructure components, external public-facing URLs/IPs, network architecture, firewall rules, and configuration audits, including wireless penetration testing.
• Further, it states that the detailed scope of the audit, findings, and outcomes of these activities shall be provided in the comprehensive VAPT report along with a checklist of test cases providing "FAIL" and "PASS" status.
Kindly refer to the attached document for detailed notification.
[Circular no. - NSE/INSP/63908]
