In India, it is legally mandatory for which of the following to report on cyber security incidents ?
- 1.Service providers
- 2.Data centres
- 3.Body corporate
Select the correct answer using the code given below :
Show answer
Answer: D. Under Section 70B of the Information Technology Act, 2000, CERT-In is the national agency for cyber security incidents. The Information Technology (CERT-In and Manner of Performing Functions and Duties) Rules, 2013 make it mandatory for service providers, intermediaries, data centres and body corporates to report cyber security incidents to CERT-In. So 1, 2 and 3.
Watch for: Watch for assuming only private companies or only telecom providers are covered; the rules name all three.
Why the other options are wrong
- A. Wrong because data centres and body corporates must also report.
- B. Wrong because body corporates must also report.
- C. Wrong because service providers and data centres must also report.
Source to check: Information Technology Act, 2000, Section 70B; IT (CERT-In and Manner of Performing Functions and Duties) Rules, 2013, Rule 12; CERT-In website (cert-in.org.in)
Answer from the official UPSC key. Written and fact-checked by AI against the official key. Spotted a mistake? Report it.