This is with reference to the SEBI circular no. SEBI/HO/MIRSD/CIR/PB/2018/147 dated December 03, 2018, SEBI/HO/MIRSD/DOP/CIR/P/2019/109 dated October 15, 2019 and Exchange circular no. 20191022-27 dated October 22, 2019, in relation to Cyber Security & Cyber Resilience framework for Stock Brokers / Depository Participants and Exchange notice no. 20230331-68 dated March 31, 2023, on Revised and Standardized “Terms Of Reference” for “Cyber Security and Cyber Resilience Audit report” of Stock Brokers / Trading Members across Exchanges and Exchange notice no. 20230519-12 dated May 19, 2023 wherein all Stock Brokers / Trading members were directed to submit System Audit Report for the period ended March 31, 2023 to the Exchange on or before June 30, 2023 in electronic form through BEFS (BSE Electronic Filing System). No documents are to be submitted in physical form.
Members may note that the Cyber Security & Cyber Resilience Audit Report for the period ended March 31, 2023 is to be submitted in electronic form only through BEFS (BSE Electronic Filing System) and the module for submission has enabled at following link:
http://befs.bseindia.com -> Cyber Security & Cyber Resilience Audit Report.
Members are requested to refer to the User Manual available in Exchange Notice no. 20230519-12 dated May 19, 2023 while submitting the report.
Further, also note that “Cyber Security & Cyber Resilience Audit Report” has to be digitally signed and in format as prescribed in guideline of the above-mentioned notice.
The following penalty/disciplinary actions would be initiated against the Member for late/non- submission of Cyber Security & Cyber Resilience Audit Report.
|
Particulars
|
Action
|
|
Submission within 1 month from the end of due date of submission.
|
Penalty of Rs. 200/- per day
|
|
Submission after 1 month but within 3 months from the end of the due date for submission.
|
Penalty of Rs. 500/- per day
|
|
Non-Submission within 3 months from the end of due date for submission.
|
Disablement of trading facility across segments after giving 2 weeks’ notice.
Disablement notice issued to the member shall be shared with all the Exchanges for information.
Member will be enabled only after submission of system audit report.
|
It may be noted that submission of Cyber Security & Cyber Resilience Audit Report shall be considered complete only after Member submits the report to the Exchange and receives an acknowledgment email. Saved reports/reports submitted by auditor will not be considered as final submission to Exchange.
In case of any queries/clarifications, you may reach us on the following contact details.
|
Contact Name
|
Purpose
|
Contact Nos.
|
Email ID
|
|
Helpdesk
|
Cyber Security Audit XBRL related issues
|
18002330445
|
bse.auditreport(at)bseindia.com
|
|
BSE Helpdesk
|
CSAR Process related
|
22725841/5842/8888
|
bse.msc(at)bseindia.com
|
To avoid non compliance and related disincentives, it is again strongly suggested to submit the reports at earliest.
For and on behalf of BSE Ltd.
Devendra Kulkarni Shivkumar Pandey
Additional General Manager Chief Information Security Officer
|