The National Securities Depository Limited (NSDL) on January 28, 2026, has announced an enhancement allowing Cyber Security Audit Reports to be submitted electronically through the e-PASS portal, in line with the cybersecurity framework prescribed by SEBI and outlined in NSDL’s Master Circular dated April 30, 2025.
The updated process enables participants to add auditor details and upload audit reports digitally, with detailed guidelines provided in Annexure A. Participants are also required to submit a compliance declaration signed by the MD/CEO/Partners/Proprietor, confirming adherence to SEBI’s cyber security circulars along with the audit report.
The Cyber Security Audit Report is to be submitted on a half-yearly basis, with due dates of 31st December and 30th June (for the April–September 2025 period, the extended deadline is 31st January 2026). Where applicable, the Action Taken Report (ATR) must be submitted by 31st March and 30th September.
Participants are advised to follow the revised electronic submission process and adhere strictly to the prescribed timelines.
[Circular No.: NSDL/POLICY/2026/0013]
