The National Stock Exchange International Exchange (NSE IX) on October 29, 2024, issued a circular regarding Revision in Terms of Reference (TOR) for the submission of the system audit report & additional submission of the Vulnerability Assessment and Penetration Testing (VAPT) report for Vendors providing Co-Location as a Service (CaaS) facility.
The following has been stated: -
•The Exchange has revised the Terms of Reference (TOR) for vendors providing Co-Location as a Service (CaaS) to include mandatory submissions of both a half-yearly System Audit Report and a Vulnerability Assessment and Penetration Testing (VAPT) report.
•The VAPT must be conducted by a CERT-In empaneled entity and submitted within 30 days of completion.
•Any identified gaps from the VAPT should be addressed immediately, with closure status reported within three months. The deadlines for submission are November 30 for the System Audit Report covering April to September, and December 31 for the VAPT report for the same period.
The detailed circular is given in the document below.
[Circular Ref. No: 260/2024]
