Esma asks for amendment to tighten regulation with demand for external audits of defences against hackers