Question 15 from UPSC CSE 2017 - Current
Affairs

Question

In India, it is legally mandatory for which of the following to report on cyber security incidents?
1. Service providers
2. Data centres
3. Body corporate
Select the correct answer using the code given below:

Accepted Answer

Correct Option: D. 1, 2, and 3

Strategy: Identify the keyword 'legally mandatory' and cross-reference the listed organizations with those specified in the IT Act and CERT-In rules. Since service providers, data centres, and body corporates are all mandated to report incidents, option D is confirmed as correct.

Key Info: The Information Technology (The Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rules, 2013, issued under the IT Act, 2000, mandate that certain entities report cyber security incidents to the Indian Computer Emergency Response Team (CERT-In).

The obligated entities include:
- **Service providers**: Such as Internet Service Providers (ISPs), telecom operators, and other technology facilitators.
- **Data centres**: Facilities that house IT infrastructure and store digital data.
- **Body corporate**: Any company or entity handling sensitive personal data or information.
- **Intermediaries**

CERT-In serves as India's national agency for cyber incident response, established under Section 70B of the IT Act.

Reportable incidents encompass a wide range of breaches, including:
- Data theft
- System hacks
- Phishing attacks
- Denial-of-service attacks

These incidents must be reported within a prescribed time frame. Non-compliance can lead to penalties under the IT Act. These regulations are designed to strengthen the overall cyber security posture and improve incident management across India's digital ecosystem.

Answer

Option A: 1 only

Answer

Option B: 1 and 2 only

Answer

Option C: 3 only

In India, it is legally mandatory for which of the following to report on cyber security incidents? Service providers Data centres Body corporate Select the correct answer using the code given below:

In India, it is legally mandatory for which of the following to report on cyber security incidents?

Service providers

Data centres

Body corporate
Select the correct answer using the code given below: