Required actions
- Report cyber incidents to CERT-In within six hours of noticing them - Keep ICT system logs for 180 days in India; cloud, VPN and data-centre providers keep customer records for five years - Synchronise clocks to NIC/NPL time sources
India CERT-In Directions on cyber incident reporting (April 2022)
India's six-hour cyber incident reporting rule applies to AI service providers and cloud platforms operating in the country and is the world's shortest statutory reporting window.
Contribute
Spot an error, or know a record we should add? Members can propose additions and submit corrections.