CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Cyber Security
Under the CERT-In Directions issued in April 2022 under the Information Technology Act, 2000, within what time must a service provider, intermediary, data centre or body corporate report specified cyber security incidents to CERT-In?
The CERT-In Directions of April 2022 require covered entities to report specified cyber security incidents to CERT-In within 6 hours of noticing the incident or being informed of it, so that rapid national-level response and coordination are possible.
- AWithin 6 hours of noticing the incident or being brought to noticeCorrect
- BWithin 24 hours of noticing the incident
- CWithin 48 hours of noticing the incident
- DWithin 7 days of noticing the incident
Explanation
The CERT-In Directions of April 2022 require specified cyber incidents to be reported within 6 hours of noticing them or being notified. The 24-hour and 48-hour periods are not the prescribed reporting window. A 7-day period is far too long and is not the rule.
Did you get it right without looking?
One question tells you little. A timed set on Cyber Security shows your real accuracy, how long you take and where you lose marks.
More Cyber Security questions
- A company's security team states that a former employee's login still worked three months after resignation and was used to download client …
- Employees of a Pune logistics firm receive an email that appears to come from the company's CEO, with a link to a page that imitates the cor…
- A Mumbai company's employee finds her files unreadable and a message demanding payment in cryptocurrency for a decryption key. Investigation…
- An attacker enters the string ' OR '1'='1 into the login field of a company's web portal and gains access without a valid password, because …
- Under the CERT-In Directions of 2022, for how long must logs of all ICT systems be maintained securely, within the Indian jurisdiction?
- A company detects ransomware encrypting files on one finance-department server connected to the corporate network. The incident team must ac…