The Ministry of Electronics & Information Technology (MeitY) on April 28, 2022, notify CERT-In issues directions relating to information security practices, procedures, prevention, response and reporting of cyber incidents for Safe & Trusted Internet.
According to section 70B of the Information Technology Act of 2000, the Indian Computer Emergency Response Team (CERT-In) serves as the national agency for executing various functions in the domain of cyber security in the country. CERT-In monitors cyber risks and responds to occurrences that are tracked and reported to it. CERT-In delivers alerts to organizations and users on a regular basis to help them protect their data and ICT infrastructure. CERT-In requests information from service providers, intermediaries, data centers, and bodies corporate in order to coordinate reaction actions and emergency measures in the event of a cyber security incident.
As per sub-section (6) of section 70B of the Information Technology Act, 2000, CERT-In has issued directions relating to information security practices, procedures, prevention, response, and reporting of cyber incidents.
These directions will become effective after 60 days.
The directions cover the followings:
•Aspects relating to synchronization of ICT system clocks
• Mandatory reporting of cyber incidents to CERT-In
• Maintenance of logs of ICT systems
• Subscriber/customer registrations details by Data centers, Virtual Private Server (VPS) providers, VPN Service providers, cloud service providers
•KYC norms and practices by virtual asset service providers, virtual asset exchange providers, and custodian wallet providers.
[Notification No. 20(3)/2022-CERT-In]
