Submission of VAPT Report for FY 2025-26

NOTICE

To All Trading Members,

This is with reference to Exchange notice no. 20260514-27 dated 14 May 2026, on ‘Submission of VAPT Report for the FY 2025-26’. Members are required to submit the VAPT report electronically through the BEFS portal on or before the prescribed due date to avoid any penal or disciplinary action, in accordance with the timelines mentioned in the tables below:

i) Half-yearly period – October 01, 2025 – March 31, 2026 (applicable to QSBs & REs which have been identified as ‘Protected systems’ and/or CII by NCIIPC)

ii) Once in a Year – FY – April 01, 2025, to March 31, 2026 (applicable to Self-certification REs, Small-size REs, Mid-size REs, and Qualified REs (not categorized as QSBs)):

With reference to Exchange Notice No. 20250929-81 dated September 29, 2025, regarding technology-based sharing mechanisms for common submissions among exchanges, Members of the Exchange who are also registered with NSE shall submit their VAPT Audit report to NSE only. Members of the Exchange who are not registered with NSE shall continue to make submissions to the Exchange as per existing process. The report has to be submitted electronically through the BEFS portal on or before the due date to avoid any penal or disciplinary action.

To ensure ease of use and better understanding of the VAPT audit module, a user manual for both Members and Auditors is enclosed here with (Annexure A for Member and Annexure B for Auditor).

For any queries or clarifications, please contact the numbers provided in Table 1 below.

Table 1: Submission Related Contacts

For and on behalf of BSE Ltd

Richa Ghosh Deputy Vice President Member Oversight

Dhananjay Mudgal Assistant Vice President Member Oversight