{"id":40648,"date":"2022-05-07T16:10:45","date_gmt":"2022-05-07T10:40:45","guid":{"rendered":"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/"},"modified":"2022-05-07T16:11:08","modified_gmt":"2022-05-07T10:41:08","slug":"biz-iti-cyber-rules","status":"publish","type":"post","link":"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/","title":{"rendered":"Global tech industry body seeks revision in India&#8217;s directive on reporting of cyber security breach"},"content":{"rendered":"<div class=\"trade-content_2\" style=\"margin-left: auto;margin-right: auto;text-align: center;\" id=\"trade-508880398\"><p><a href=\"https:\/\/tradebrains.in\/get\/telegram\/\"><img decoding=\"async\" class=\"alignnone wp-image-101992\" src=\"https:\/\/tradebrains.in\/features\/wp-content\/uploads\/2023\/01\/telegram-channel-300x119.png\" alt=\"\" width=\"148\" height=\"59\" \/><\/a> <a href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMN3Epgswxc--Aw?hl=en-IN&amp;gl=IN&amp;ceid=IN%3Aen\"><img decoding=\"async\" class=\"alignnone wp-image-123430\" src=\"https:\/\/tradebrains.in\/features\/wp-content\/uploads\/2024\/05\/follow-on-google-news-300x82.png\" alt=\"follow-on-google-news\" width=\"222\" height=\"61\" srcset=\"https:\/\/tradebrains.in\/features\/wp-content\/uploads\/2024\/05\/follow-on-google-news-300x82.png 300w, https:\/\/tradebrains.in\/features\/wp-content\/uploads\/2024\/05\/follow-on-google-news-150x41.png 150w, https:\/\/tradebrains.in\/features\/wp-content\/uploads\/2024\/05\/follow-on-google-news.png 468w\" sizes=\"(max-width: 222px) 100vw, 222px\" \/><\/a><\/p>\n<\/div><p> New Delhi, May 7 (PTI) US-based technology industry body ITI, having global tech firms such as Google, Facebook, IBM and Cisco as its members, has sought a revision in the Indian government&#8217;s directive on reporting of cyber security breach incidents.<\/p><div class=\"trade-content_7\" style=\"margin-left: auto;margin-right: auto;text-align: center;\" id=\"trade-1023163030\"><!-- Composite Start --> \r\n <div id=\"M923760ScriptRootC1549812\"> \r\n <\/div> \r\n <script src=\"https:\/\/jsc.mgid.com\/t\/r\/tradebrains.in.1549812.js\" async> \r\n <\/script> \r\n <!-- Composite End --><\/div>\n<p> ITI said that the provisions under the new mandate may adversely impact organisations and undermine cyber security in the country.<\/p>\n<p> ITI country manager for India Kumar Deep, in a letter to CERT-In chief Sanjay Bahl dated May 5, has asked for a wider stakeholder consultation with the industry before finalising on the directive.<\/p>\n<p> &#8220;The directive has the potential to improve India&#8217;s cyber security posture if appropriately developed and implemented, however, certain provisions in the bill, including counterproductive incident reporting requirements, may negatively impact Indian and global enterprises and undermine cyber security,&#8221; Deep said.<\/p><div class=\"trade-content_5\" id=\"trade-1947489913\"><script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-4023722985638610\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- in_content_2_news -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-4023722985638610\"\r\n     data-ad-slot=\"7925020301\"\r\n     data-ad-format=\"auto\"\r\n     data-full-width-responsive=\"true\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><\/div>\n<p> Indian Computer Emergency Response Team (CERT-In) on April 28, issued a directive asking all government and private agencies, including internet service providers, social media platforms and data centres, to mandatorily report cyber security breach incidents to it within six hours of noticing them.<\/p>\n<p> The new circular issued by the CERT-In mandates all service providers, intermediaries, data centres, corporates and government organisations to mandatorily enable logs of all their ICT (Information and Communication Technology) systems and maintain them securely for a rolling period of 180 days and the same shall be maintained within the Indian jurisdiction.<\/p>\n<p> ITI has raised concerns over the mandatory reporting of breach incidents within six hours of noticing, to enable logs of all ICT systems and maintain them within Indian jurisdiction for 180 days, the overbroad definition of reportable incidents and the requirement that companies connect to the servers of Indian government entities.<\/p>\n<p> Deep, in the letter, said that the organisations must be given 72 hours to report an incident in line with global best practices and not just six hours.<\/p>\n<p> ITI said that the government&#8217;s mandate to enable logs of all covered entities&#8217; information and communications technology systems, maintain logs &#8220;securely for a rolling period of 180 days&#8221; within India and make them available to the Indian government upon request is not a best practice.<\/p>\n<p> &#8220;It would make such repositories of logged information a target for global threat actors, in addition to requiring significant resources (both human and technical) to implement,&#8221; Deep said.<\/p><div class=\"trade-content-10\" id=\"trade-2094158249\"><script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-4023722985638610\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- in_content_3_news -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-4023722985638610\"\r\n     data-ad-slot=\"2969612066\"\r\n     data-ad-format=\"auto\"\r\n     data-full-width-responsive=\"true\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><\/div>\n<p> ITI also raised concern on the requirement that &#8220;all service providers, intermediaries, data centres, body corporate and government organisations shall connect to the NTP servers of Indian labs and other entities for synchronisation of all their ICT systems clocks&#8221;.<\/p>\n<p> The global body said that the provisions could negatively affect companies&#8217; security operations as well as the functionality of their systems, networks and applications.<\/p>\n<p> ITI said that the government&#8217;s current definition of reportable incident to include activities such as probing and scanning is far too broad given probes and scans are everyday occurrences.<\/p>\n<p> &#8220;It would not be useful for companies or CERT-In to spend time gathering, transmitting, receiving and storing such a large volume of insignificant information that arguably will not be followed up on,&#8221; Deep said.<\/p>\n<p> ITI has asked the government to defer timeline for implementation of the new directive and launch a wider consultation with all stakeholders for its effective implementation.<\/p>\n<p> ITI demanded CERT-In to &#8220;revise the directive to address the concerning provisions with regard to incident reporting obligations, including related to the reporting timeline, scope of covered incidents and logging data localisation requirements&#8221;. PTI PRS  HVA  DRR<\/p>\n<div class=\"trade-after-content\" id=\"trade-122495389\"><div id=\"taboola-below-article-thumbnails\"><\/div>\r\n<script type=\"text\/javascript\">\r\n  window._taboola = window._taboola || [];\r\n  _taboola.push({\r\n    mode: 'alternating-thumbnails-a',\r\n    container: 'taboola-below-article-thumbnails',\r\n    placement: 'Below Article Thumbnails',\r\n    target_type: 'mix'\r\n  });\r\n<\/script>\r\n<script type=\"text\/javascript\">\r\n  window._taboola = window._taboola || [];\r\n  _taboola.push({flush: true});\r\n<\/script><\/div>","protected":false},"excerpt":{"rendered":"<p>New Delhi, May 7 (PTI) US-based technology industry body ITI, having global tech firms such as Google, Facebook, IBM and Cisco as its members, has sought a revision in the Indian government&#8217;s directive on reporting of cyber security breach incidents. ITI said that the provisions under the new mandate may adversely impact organisations and undermine [&hellip;]<\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[31],"tags":[],"class_list":["post-40648","post","type-post","status-publish","format-standard","hentry","category-news"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.0) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Global tech industry body seeks revision in India&#039;s directive on reporting of cyber security breach - Trade Brains Features<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Global tech industry body seeks revision in India&#039;s directive on reporting of cyber security breach\" \/>\n<meta property=\"og:description\" content=\"New Delhi, May 7 (PTI) US-based technology industry body ITI, having global tech firms such as Google, Facebook, IBM and Cisco as its members, has sought a revision in the Indian government&#8217;s directive on reporting of cyber security breach incidents. ITI said that the provisions under the new mandate may adversely impact organisations and undermine [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/\" \/>\n<meta property=\"og:site_name\" content=\"Trade Brains Features\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/TradeBrainsOfficial\/\" \/>\n<meta property=\"article:published_time\" content=\"2022-05-07T10:40:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-05-07T10:41:08+00:00\" \/>\n<meta name=\"author\" content=\"PTI News\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@TradeBrainsGrp\" \/>\n<meta name=\"twitter:site\" content=\"@TradeBrainsGrp\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"PTI News\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/\",\"url\":\"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/\",\"name\":\"Global tech industry body seeks revision in India's directive on reporting of cyber security breach - Trade Brains Features\",\"isPartOf\":{\"@id\":\"https:\/\/tradebrains.in\/features\/#website\"},\"datePublished\":\"2022-05-07T10:40:45+00:00\",\"dateModified\":\"2022-05-07T10:41:08+00:00\",\"author\":{\"@id\":\"https:\/\/tradebrains.in\/features\/#\/schema\/person\/432b854fc143da831dae702afe00a7d3\"},\"breadcrumb\":{\"@id\":\"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/tradebrains.in\/features\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Global tech industry body seeks revision in India&#8217;s directive on reporting of cyber security breach\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/tradebrains.in\/features\/#website\",\"url\":\"https:\/\/tradebrains.in\/features\/\",\"name\":\"Trade Brains\",\"description\":\"Stock Market NSE\/BSE Latest News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/tradebrains.in\/features\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/tradebrains.in\/features\/#\/schema\/person\/432b854fc143da831dae702afe00a7d3\",\"name\":\"PTI News\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/tradebrains.in\/features\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/33d290530d88025709a22a0e9cea1a42ff2e6013ca877b91a86e7ca950cdd59e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/33d290530d88025709a22a0e9cea1a42ff2e6013ca877b91a86e7ca950cdd59e?s=96&d=mm&r=g\",\"caption\":\"PTI News\"},\"url\":\"https:\/\/tradebrains.in\/features\/author\/ptinews\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Global tech industry body seeks revision in India's directive on reporting of cyber security breach - Trade Brains Features","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/","og_locale":"en_US","og_type":"article","og_title":"Global tech industry body seeks revision in India's directive on reporting of cyber security breach","og_description":"New Delhi, May 7 (PTI) US-based technology industry body ITI, having global tech firms such as Google, Facebook, IBM and Cisco as its members, has sought a revision in the Indian government&#8217;s directive on reporting of cyber security breach incidents. ITI said that the provisions under the new mandate may adversely impact organisations and undermine [&hellip;]","og_url":"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/","og_site_name":"Trade Brains Features","article_publisher":"https:\/\/www.facebook.com\/TradeBrainsOfficial\/","article_published_time":"2022-05-07T10:40:45+00:00","article_modified_time":"2022-05-07T10:41:08+00:00","author":"PTI News","twitter_card":"summary_large_image","twitter_creator":"@TradeBrainsGrp","twitter_site":"@TradeBrainsGrp","twitter_misc":{"Written by":"PTI News","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/","url":"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/","name":"Global tech industry body seeks revision in India's directive on reporting of cyber security breach - Trade Brains Features","isPartOf":{"@id":"https:\/\/tradebrains.in\/features\/#website"},"datePublished":"2022-05-07T10:40:45+00:00","dateModified":"2022-05-07T10:41:08+00:00","author":{"@id":"https:\/\/tradebrains.in\/features\/#\/schema\/person\/432b854fc143da831dae702afe00a7d3"},"breadcrumb":{"@id":"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/tradebrains.in\/features\/biz-iti-cyber-rules\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/tradebrains.in\/features\/"},{"@type":"ListItem","position":2,"name":"Global tech industry body seeks revision in India&#8217;s directive on reporting of cyber security breach"}]},{"@type":"WebSite","@id":"https:\/\/tradebrains.in\/features\/#website","url":"https:\/\/tradebrains.in\/features\/","name":"Trade Brains","description":"Stock Market NSE\/BSE Latest News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/tradebrains.in\/features\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/tradebrains.in\/features\/#\/schema\/person\/432b854fc143da831dae702afe00a7d3","name":"PTI News","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/tradebrains.in\/features\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/33d290530d88025709a22a0e9cea1a42ff2e6013ca877b91a86e7ca950cdd59e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/33d290530d88025709a22a0e9cea1a42ff2e6013ca877b91a86e7ca950cdd59e?s=96&d=mm&r=g","caption":"PTI News"},"url":"https:\/\/tradebrains.in\/features\/author\/ptinews\/"}]}},"_links":{"self":[{"href":"https:\/\/tradebrains.in\/features\/wp-json\/wp\/v2\/posts\/40648","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tradebrains.in\/features\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tradebrains.in\/features\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tradebrains.in\/features\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/tradebrains.in\/features\/wp-json\/wp\/v2\/comments?post=40648"}],"version-history":[{"count":1,"href":"https:\/\/tradebrains.in\/features\/wp-json\/wp\/v2\/posts\/40648\/revisions"}],"predecessor-version":[{"id":40689,"href":"https:\/\/tradebrains.in\/features\/wp-json\/wp\/v2\/posts\/40648\/revisions\/40689"}],"wp:attachment":[{"href":"https:\/\/tradebrains.in\/features\/wp-json\/wp\/v2\/media?parent=40648"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tradebrains.in\/features\/wp-json\/wp\/v2\/categories?post=40648"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tradebrains.in\/features\/wp-json\/wp\/v2\/tags?post=40648"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}