https://www.taxtmi.com/circulars?id=65624 QRTAs must identify and classify critical assets-including systems with sensitive or PII data-and maintain an approved inventory; conduct VAPT (covering servers, networking and security devices) at least annually (or biannually for designated protected systems) using CERT In empaneled organisations; submit Technology Committee approved VAPT reports to SEBI within one month; remediate vulnerabilities immediately and report closure within three months; perform pre commissioning testing of critical systems; carry out biannual cyber audits and furnish an MD/CEO compliance declaration with audit reports; implement measures and report status to SEBI within ten days, effective immediately. en-us Fri, 27 May 2022 00:00:00 +0530 Fri, 27 May 2022 18:16:00 +0530 TaxTMI RSS Generator https://www.taxtmi.com/circulars?id=65624 QRTAs must identify and classify critical assets-including systems with sensitive or PII data-and maintain an approved inventory; conduct VAPT (covering servers, networking and security devices) at least annually (or biannually for designated protected systems) using CERT In empaneled organisations; submit Technology Committee approved VAPT reports to SEBI within one month; remediate vulnerabilities immediately and report closure within three months; perform pre commissioning testing of critical systems; carry out biannual cyber audits and furnish an MD/CEO compliance declaration with audit reports; implement measures and report status to SEBI within ten days, effective immediately. Circulars SEBI Fri, 27 May 2022 00:00:00 +0530 https://www.taxtmi.com/circulars?id=65624