PASS Securities Operations and Risk Management Examination Difficulty: Beginner 2 Questions   5 min read
📌 Chapter 8.8 — INTERNET BASED TRADING (IBT) & SECURITIES TRADING USING WIRELESS TECHNOLOGY (STWT)

Picture a scenario at 3:15 PM, where your firm’s servers are under heavy load due to peak intraday square-offs. Suddenly, an alert flashes on your dashboard: multiple unauthorized login attempts originating from an unfamiliar IP address using a client’s credentials. This is not just a technical glitch; it is a direct challenge to the integrity of your firm’s infrastructure. In the world of Internet Based Trading and wireless technology, your network security protocol is the primary buffer between a secure client transaction and a catastrophic breach of market trust.

In the Indian capital markets, SEBI mandates that every digital interaction must be shielded by robust encryption standards, typically 128-bit SSL or higher. When a client initiates a trade from a mobile app, their order travels through a complex ecosystem where data interception is a constant risk. Implementing two-factor authentication—or 2FA—is not merely a bureaucratic checkbox; it is an operational imperative that ensures the person initiating the trade is indeed the registered account holder.

By enforcing unique audit trails and logging source IP addresses for every session, you create a forensic map that protects the firm during regulatory audits or if a client raises a dispute regarding an unauthorized trade.

Consider the practical application of these controls when managing margin risks. A client might attempt to place a large “buy” order while away from their primary registered network. If your security protocol detects an anomalous location or an unverified device, the system should ideally flag this for secondary verification before the pre-trade risk check even processes the order.

Failing to authenticate the connection can lead to massive exposure if the client later claims the trade was performed without their consent, potentially leading to long-drawn-out litigation and loss of reputation for your brokerage.

Ultimately, your role as an operations professional is to act as the custodian of these digital handshakes. Maintaining secure network protocols involves periodic penetration testing and engaging with CISA or DISA certified auditors to validate your firm’s resilience against evolving cyber threats. By internalizing these requirements, you transition from being a passive observer of technology to an active guardian of market integrity, ensuring that every digital order is backed by a verifiable chain of trust.

Nuance

⚠️ Nuance
Many candidates incorrectly assume that network security is solely an IT or ’tech team’ problem, rather than a fundamental operational risk responsibility. In reality, the failure to ensure proper encryption or authentication processes during client onboarding and session management constitutes a direct regulatory breach that rests on the compliance and operations departments. A common pitfall is viewing 2FA as a one-time setup; instead, remember that consistent adherence to periodic system audits and IP-based monitoring is what keeps a broker compliant under the SEBI framework.

Check Your Understanding

Practice Question 1

Which of the following is an essential regulatory and operational requirement for a broker providing STWT in India?

Practice Question 2

Why must a broker capture and store the source IP address for every client login session?

This is a companion read for Section 8.8 — INTERNET BASED TRADING (IBT) & SECURITIES TRADING USING WIRELESS TECHNOLOGY (STWT) from PASS Securities Operations and Risk Management Examination by Akhilesh Gururani, available on Amazon Kindle.

Copyright © 2026 `Akhilesh Gururani. All rights reserved.