The Multi Commodity Exchange of India Limited (MCX) on September 13, 2024, issued a circular regarding the Submission of the VAPT report and/or Action taken report (ATR)/Compliance Report.
Trading Members are requested to conduct and complete the VAPT during the period September to November for FY 2024-25, in accordance with paragraph/clause 11 (identification of critical assets/applications) & 41 (VAPT) of the mentioned SEBI circular and the final report after approval from Technology Committee of respective members within one month from the date of completion of VAPT, shall be submitted through an enhanced portal to the Stock Exchange.
In view of the above, all trading members shall carry out Vulnerability Assessment and Penetration Tests (VAPT) which inter-alia include all critical applications (trading, back office & related activities) and infrastructure components like Servers, Networking systems, Security devices, load balancers pertaining to the activities done as Stock Brokers.
The detailed VAPT report along with a summary of the report (as per the format specified in Annexure A) as a single document shall be digitally signed by CERT-In empanelled entity to be submitted to Exchange by December 31, 2024, through the online Member Portal – https://member.mcxindia.com. Help file ‘VAPT–help file’ is available on the VAPT submission online portal and on https://sftp.mcxindia.com/Common/Online portal help file folder.
[Circular No.: MCX/TECH/605/2024]
