https://www.taxtmi.com/circulars?id=65649 Stock Brokers and Depository Participants must classify and inventory critical assets, including ancillary systems, obtain board-level approval of critical systems, and perform annual VAPT and comprehensive annual cyber audit. VAPT must be done by CERT In empanelled organisations, with the final report submitted to Exchanges/Depositories within one month after Technology Committee approval; vulnerabilities must be remediated promptly and closure compliance submitted within three months. Vulnerability scanning and penetration testing are required before commissioning new critical systems. Entities must submit an MD/CEO/partner/proprietor declaration of compliance and report implementation status to Exchanges/Depositories within ten days; Exchanges/Depositories must amend bylaws and notify members. en-us Tue, 07 Jun 2022 00:00:00 +0530 Tue, 07 Jun 2022 18:45:00 +0530 TaxTMI RSS Generator https://www.taxtmi.com/circulars?id=65649 Stock Brokers and Depository Participants must classify and inventory critical assets, including ancillary systems, obtain board-level approval of critical systems, and perform annual VAPT and comprehensive annual cyber audit. VAPT must be done by CERT In empanelled organisations, with the final report submitted to Exchanges/Depositories within one month after Technology Committee approval; vulnerabilities must be remediated promptly and closure compliance submitted within three months. Vulnerability scanning and penetration testing are required before commissioning new critical systems. Entities must submit an MD/CEO/partner/proprietor declaration of compliance and report implementation status to Exchanges/Depositories within ten days; Exchanges/Depositories must amend bylaws and notify members. Circulars SEBI Tue, 07 Jun 2022 00:00:00 +0530 https://www.taxtmi.com/circulars?id=65649