In India, it is legally mandatory for which of the following to report on cybersecurity incidents?
- Service providers
- Data centres
- Body corporate
Select the correct answer using the code given below:
Detailed Explanation:
Answer: Option 4 — 1, 2 and 3
✅ Statement 1 – Correct: Service providers are legally mandated to report cybersecurity incidents to CERT-In (Indian Computer Emergency Response Team) under Section 70B of the Information Technology Act, 2000, and the Information Technology (The Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rules, 2013.
✅ Statement 2 – Correct: Data centres are explicitly listed among the entities required to mandatorily report cybersecurity incidents to CERT-In under the IT (CERT-In) Rules, 2013. This includes incidents like data breaches, unauthorized access, and system compromises within six hours of noticing or being brought to notice.
✅ Statement 3 – Correct: Body corporates (companies and organizations) are required to report specified cybersecurity incidents to CERT-In under the IT Act, 2000, and associated rules. This obligation ensures timely response to cyber threats affecting business operations and sensitive data.
Question 2 of 2 Cyber Laws in India
Practice PYQ questions from this topic across all years
In India, under cyber insurance for individuals, which of the following benefits are...
All questions in this topic completed!