SECP appellate bench upholds penalty on VIS credit rating company