India · Incident Response

CERT-In Directions

Indian Computer Emergency Response Team directions on incident reporting, log retention, KYC for VPN/cloud, and cyber hygiene.

Short name

CERT-In

6-hour reporting mandate active

CERT-In Directions (2022 & updates)

Requires reporting of specified cyber incidents to CERT-In within 6 hours, 180-day log retention on ICT systems, and KYC/subscriber record retention obligations for VPN, cloud, and data centre providers.

Official source Get advisory on CERT-In