In India, it is legally mandatory for which of the following to report on cyber security incidents ? 1. Service providers 2. Data centres 3. Body corporate Select the correct answer using the code given below :
- (a) 1 only
- (b) 1 and 2 only
- (c) 3 only
- (d) 1, 2 and 3 ✓ UPSC's answer
Why the answer is (d)
• Under Section 70B of the IT Act, 2000 and the CERT-In Rules, 2013, service providers, intermediaries, data centres and body corporates must report cyber-security incidents to CERT-In within a reasonable time (now six hours under the 2022 directions).
• All three categories listed are therefore legally bound to report.
• Hence 1, 2 and 3, option (d).
Why the other options are wrong
- (a) 1 only
- Data centres and body corporates must also report.
- (b) 1 and 2 only
- Body corporates must also report.
- (c) 3 only
- Service providers and data centres must also report.
Asked in the GS Paper I of the UPSC Civil Services Preliminary Examination 2017, held on 18 June 2017. Question and answer key: Union Public Service Commission. Explanation: UPSC Answer Check.