CS Professional · Internal and Forensic Audit · Cyber Forensics
After a ransomware incident, a company's forensic team wants the national agency to coordinate incident response and issue advisories. Under the Information Technology Act, 2000, which body serves as the national agency for incident response in cyber security, and what can it do about non-cooperation?
The Indian Computer Emergency Response Team is the national agency for incident response under section 70B. It can call for information and direct service providers, intermediaries, data centres and body corporate. Non-compliance is punishable with imprisonment up to one year, or fine up to one crore rupees, or both.
- AThe Controller, which may only recommend voluntary reporting
- BThe Indian Computer Emergency Response Team, which may call for information and give directions to service providers, intermediaries, data centres and body corporate, with failure to comply punishable with imprisonment up to one year or fine up to one crore rupees or bothCorrect
- CThe Indian Computer Emergency Response Team, whose directions carry no penalty for non-compliance
- DAn agency authorised under section 69B, which may impose life imprisonment for refusing to share logs
Explanation
Section 70B makes the Indian Computer Emergency Response Team the national agency for incident response. It may call for information and give directions to service providers, intermediaries, data centres, body corporate and others. Failure to comply is punishable with imprisonment up to one year or fine up to one crore rupees or both. The distractors deny a penalty or invent life imprisonment.
Did you get it right without looking?
One question tells you little. A timed set on Cyber Forensics shows your real accuracy, how long you take and where you lose marks.
More Cyber Forensics questions
- Narmada Data Centres Pvt Ltd receives a written direction from CERT-In to supply information needed to handle a cyber incident, and it delib…
- Ravi, an outsider with no authorisation, knowingly accesses a government database restricted for reasons of the security of the State and ob…
- During a suspected data-theft inquiry at an Indian firm, a forensic auditor must examine a seized laptop's hard disk. Which step should be t…
- A forensic auditor reviews an incident at Bharat Grid Ltd where an outsider, intending to threaten the security of India, introduced a compu…
- Sahyadri Textiles Ltd, a company, stores customers' bank account details on its own servers. Because the firm skipped basic access controls,…
- During a forensic review, an auditor examines a log that records the origin, destination, route, time, size and duration of communications b…