Laws and sections by number or title, due dates, pages, and updates.
Trading members must submit the Vulnerability Assessment and Penetration Testing report for the financial year 2025-26 through the BEFS portal. Members must obtain approval from their respective IT Committee before submission. Members registered with the National Stock Exchange must submit their reports to the National Stock Exchange only. Members not registered with the National Stock Exchange must submit their reports to the Exchange. Failure to submit the report by the due date results in penal or disciplinary action.
What you must do
Key dates
Who is affected
Exceptions
If you do not comply
Ask about this notice
| Notice No. | 20260727-13 |
|---|---|
| Notice Date | 27 Jul 2026 |
| Category | Compliance |
| Segment | General |
| Department | DOSS |
| Subject | Reminder for Submission of VAPT Report for FY 2025-26. |
| Attachments | AnnexureA ; AnnexureB |
To All Trading Members,
This is with reference to Exchange Notice No. 20260514-27 dated 14 May 2026, on ‘Submission of VAPT Report for the FY 2025-26’ and Exchange Notice No. 20260619-36 dated 19 June, 2026. The due date of submission of VAPT report applicable to Self-certification REs, Small-size REs, Mid-size REs, and Qualified REs (not categorized as QSBs) is mentioned below:
| Yearly Submission | Due Date |
|---|---|
| Conduct of VAPT through CERT-In empanelled Auditor | June 30, 2026 |
| Report shall be submitted after approval from respective IT Committee | July 31, 2026 |
With reference to Exchange Notice No. 20250929-81 dated September 29, 2025, regarding technology-based sharing mechanisms for common submissions among exchanges, Members of the Exchange who are also registered with NSE shall submit their VAPT Audit report to NSE only. Members of the Exchange who are not registered with NSE shall continue to make submissions to the Exchange as per existing process. The report has to be submitted electronically through the BEFS portal on or before the due date to avoid any penal or disciplinary action.
Trading members are requested to take note of Annexure 1 of Exchange Circular No. 20260417-45 dated April 17, 2026, regarding actions for non-compliances observed in periodic submissions made by Trading Members/REs related to submission of VAPT Report.
To ensure ease of use and better understanding of the VAPT audit module, a user manual for both Members and Auditors is enclosed here with (Annexure A for Member and Annexure B for Auditor).
For any queries or clarifications, please contact the numbers provided in Table 1 below.
| Table 1: Submission Related Contacts | ||
|---|---|---|
| Purpose | Contact Nos. | Email ID |
| VAPT Audit XBRL related issues | +91 9316749660 | bse.xbrl(at)bseindia.com |
| VAPT Audit Process related | 022-69158540 022-45720640 022-45720440 | mscopr(at)bseindia.com |
For and on behalf of BSE Ltd
Richa Ghosh Deputy Vice President Member Oversight
Dhananjay Mudgal Assistant Vice President Member Oversight
