The National Securities Depository Limited (NSDL) on September 18, 2024, issued a circular regarding the Submission of the Annual Cyber Audit Report.
The attention of Participants is invited to Circular No. NSDL/POLICY/2022/083 dated June 13, 2022, in response to SEBI Circular No. SEBI/HO/MIRSD/TPD/P/CIR/2022/80 dated June 07, 2022, on ‘Modification in Cyber Security and Cyber resilience framework for Stockbrokers / Depository Participants’.
As per Paragraph 3 of the abovementioned SEBI circular, the Participants were mandated to conduct a comprehensive cyber security audit at least once in a financial year.
At present, Participants are required to submit a consolidated report to NSDL to comply with the abovementioned circular. Pursuant to guidance received from SEBI, w.e.f. FY 2024-25, Participants shall be required to submit two separate reports, i.e. One for Cyber Security Audit and One for System Audit.
The qualification, criteria for selection and appointment of auditor for conducting cyber security audit is attached as Annexure A. The terms of reference for cyber security audit report is attached as Annexure B.
[Circular No.: NSDL/POLICY/2024/0133]
