The Central Depository Services (India) Limited (CDSL), on December 15, 2025, notified regarding the Submission of Vapt Report as per SEBI CSCRF.
The following has been stated namely: -
• In this regard, for the half-yearly period of April 2025 to September 2025 (applicable to QSBs and Protected REs), the VAPT must be conducted through a CERT-In–empanelled auditor, and the report should be submitted to the Depository after obtaining approval from the respective IT Committee, by December 31, 2025. The submission of the ATR/Revalidation Report, providing the closure status and approved by the respective IT Committee, will be due by March 31, 2026.
• Accordingly, DPs are advised to submit all VAPT-related reports manually to [email protected]
[Circular no. CDSL/IS/DP/POLCY/2025/822]