Back to DPDPA Glossary Index
Section 8(5); security practiceSecurity & Safeguards
Vulnerability Assessment & Penetration Testing (VAPT)
A vulnerability assessment identifies weaknesses that could expose personal data.
Meaning and legal context
Frequency and methods should reflect risk and other applicable requirements. DPDP does not universally prescribe twice-yearly penetration tests or one security certification.
Practical application
Prioritise findings by exploitability and impact, then verify remediation.
Related concepts
Official sources and editorial review
Prepared by DPDPA Shield. Explanations are plain-language summaries; the cited legislation controls. Last reviewed .
Put privacy knowledge into practice
Explore consent, data inventory and rights-request workflows with DPDPA Shield.