UPSC Prelims 2017 Q85: Science & Technology – Computer & Information Technology
In India, it is legally mandatory for which of the following to report on cyber security
incidents?
1. Service providers
2. Data centres
3. Body corporate
Select the correct answer
using the code given below:
- (a) 1 only
- (b) 1 and 2 only
- (c) 3 only
- (d) 1, 2 and 3
Answer: (d) 1, 2 and 3
Explanation
Reporting of cyber security incidents in India
Section 70B of the Information Technology Act, 2000 makes CERT-In the national agency for cyber security incidents.
The CERT-In Rules, 2013 say who must report.
| Entity | Legally mandatory to report? |
|---|---|
| 1. Service providers | Yes |
| 2. Data centres | Yes |
| 3. Body corporate | Yes |
| Intermediaries | Yes |
About CERT-In:
| Feature | Detail |
|---|---|
| Full form | Indian Computer Emergency Response Team |
| Ministry | Electronics and Information Technology |
| Working since | 2004 |
| 2022 directions | Incidents must be reported within 6 hours |
Answer: (d) 1, 2 and 3.
Why each option is right or wrong
- (a) Incorrect. Data centres and body corporate must also report incidents.
- (b) Incorrect. A body corporate is also bound to report cyber security incidents.
- (c) Incorrect. Service providers and data centres are bound as well.
- (d) CORRECT. Service providers, data centres and body corporate must all report to CERT-In.
Key point
Section 70B, IT Act 2000: CERT-In is the nodal agency; service providers, intermediaries, data centres and body corporate must report cyber security incidents.
Remember
Cyber incidents: everyone reports to CERT-In (Section 70B).
Common mistakes
- Thinking only telecom and internet service providers have to report.
- Confusing CERT-In with NCIIPC, which protects critical information infrastructure.
- Assuming reporting is voluntary for private companies.
Exam tip
In 'legally mandatory to report' questions on cyber security, the list is wide. All listed entities are usually covered.
Sources
- Information Technology Act, 2000 — Section 70B
- Information Technology (The Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rules, 2013