UPSC Prelims 2017 GS Paper I · Q85 of 100 General Science medium

In India, it is legally mandatory for which of the following to report on cyber security incidents ? 1. Service providers 2. Data centres 3. Body corporate Select the correct answer using the code given below :

  1. (a) 1 only
  2. (b) 1 and 2 only
  3. (c) 3 only
  4. (d) 1, 2 and 3 ✓ UPSC's answer

Why the answer is (d)

• Under Section 70B of the IT Act, 2000 and the CERT-In Rules, 2013, service providers, intermediaries, data centres and body corporates must report cyber-security incidents to CERT-In within a reasonable time (now six hours under the 2022 directions).

• All three categories listed are therefore legally bound to report.

• Hence 1, 2 and 3, option (d).

Why the other options are wrong

(a) 1 only
Data centres and body corporates must also report.
(b) 1 and 2 only
Body corporates must also report.
(c) 3 only
Service providers and data centres must also report.

Asked in the GS Paper I of the UPSC Civil Services Preliminary Examination 2017, held on 18 June 2017. Question and answer key: Union Public Service Commission. Explanation: UPSC Answer Check.

Reading the answer is not the same as getting it right under a clock. Practise this question with UPSC's negative marking, and anything you miss goes into an error notebook until you get it right twice.

Practise this paper free