The National Securities Depository Limited (NSDL) on October 10, 2024, notified regarding the submission of VAPT compliance & revalidation report in electronic form through ePASS portal.
The following has been stated namely: -
• Participants shall submit the initial VAPT report to NSDL latest by December 31, 2024, the procedure for submission of VAPT report through e-PASS portal is enclosed as Annexure A in the below attached document.
• Participants shall address all vulnerabilities from the initial VAPT report and conduct a revalidation assessment, submitting compliance reports to NSDL within three months and the final VAPT report by March 31, 2025, the guidelines for submitting the VAPT revalidation report are enclosed in Annexure B.
• Further, it states the scope for conducting VAPT includes grey box assessments of various applications, authenticated vulnerability assessments of infrastructure, external penetration testing of public-facing URLs/IPs, network architecture reviews, firewall rule reviews, configuration audits, and wireless penetration testing.
[Circular no. - NSDL/POLICY/2024/0148]
