The National Securities Depository Limited (NSDL) on September 28, 2027, notified regarding the Submission of the Action Taken Report (ATR) for the annual and half-yearly cyber security audit through the e-PASS Application.
NSDL has advised Participants to submit the Action Taken Report (ATR) for observations reported as non-complied in the Annual and Half-Yearly Cyber Security Audit Reports through the ePASS application. For the Annual Cyber Security Audit for April 2025–March 2026, the ATR is due by September 30, 2026, while the ATR for the Half-Yearly Audit for October 2025–March 2026 is also due by September 30, 2026.
Non-submission of the ATR within the prescribed timelines will be treated as regulatory non-compliance and may attract penalties or other appropriate action under the NSDL Business Rules, as amended from time to time.
[Notification No. - NSDL/POLICY/2026/0142]
