New cyber security guidelines by Government

New cyber security guidelines by Government

Team Ambitiousbaba are here with a Current Affairs Special Series. In this series, candidates will be introduced to current affairs topics daily, which will not only improve their general awareness but also will ensure that the candidates do not lack in any current affairs topic. Today’s Current Affairs topic is “New cyber security guidelines by Government”

Government has issued new guidelines under Sec 70b of the IT Act. Now all companies and enterprises will be abided to report all cyber incidents to the Indian Computer Emergency Response Team (CERT-In) as per the new guidelines.

It is in order of government to align response activities as well as emergency measures with respect to cyber security incidents.

What is CERT-In?

It is the authorized agency of Government of India which handles with cyber security threats like hacking and phishing.

CERT-In: Computer Emergency Response Team

Founded: 19^th January 2004

Headquarter: New Delhi

Director General: Sanjay Bahl

All service providers, intermediaries, data centers, body corporate and Government organizations shall compulsorily enable logs of all their ICT systems and keep them securely for a rolling period of 180 days within the Indian jurisdiction. These rules will be implemented (come in force) after 60 days of being issued.

Response on cyber security by CERT-In:

• During the course of managing cyber incidents and interactions with the constituency, CERT-In has described certain gaps causing interference in incident analysis.
• To manage the identified gaps and issues so as to facilitate incident response measures, CERT-In has issued directions relating to information security practices, procedure, prevention, response and reporting of cyber disturbance under the provisions of sub-section (6) of section 70B of the Information Technology Act, 2000.
• These directions will become in effect after 60 days.

Other directives include synchronizing of ICT system clocks, sustainment of logs of ICT systems; subscriber/customer registrations details by data centers, virtual private server (VPS) providers, VPN Service providers, Cloud service providers; KYC norms and practices by virtual asset service providers, virtual asset exchange providers and custodian wallet providers.

The list of cyber occurrences to be reported containing data leaks and breaches, attacks on mobile apps, unauthorized access of IIT systems and identify theft and phishing attacks.

Question & Answer:

Q1. Government of India has issued new guidelines for cyber security under which rule or act?

Ans. Section 70b of the IT Act

Q2. Give the name of agency which handles cyber security threats in India on behalf of Government of India.

Ans. CERT, In

Q3. New rules will be implemented in how many days after being issued?

Ans. 60 Days

Telegram Group: Join

Best Online test series for Bank exams 2022