Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Cyber Security

Kaveri Retail Pvt Ltd, an Indian company, suffers a ransomware attack that encrypts its servers. Under the CERT-In Directions of April 2022, which statement is correct?

Under the CERT-In Directions of April 2022, a body corporate must report specified cyber incidents such as ransomware attacks to CERT-In within 6 hours of noticing them. Waiting for year-end, for public sale of data or for investigation to finish is not permitted.

  1. AThe incident should be reported to CERT-In within 6 hours of noticing itCorrect
  2. BThe incident need only be reported at year-end with the annual return
  3. CReporting is required only if customer data is sold publicly
  4. DThe incident should be reported within 30 days after investigation ends

Explanation

The CERT-In Directions of 28 April 2022 require service providers, intermediaries, data centres, body corporates and government organisations to report specified cyber incidents, including ransomware, within 6 hours of noticing them or being notified. The year-end, data-sale and 30-day options have no basis in the Directions.

Did you get it right without looking?

One question tells you little. A timed set on Cyber Security shows your real accuracy, how long you take and where you lose marks.

Practise Cyber SecurityFree diagnostic mock

More Cyber Security questions