On 21 November 2024, the Department of Telecommunications (DoT)
issued the final Telecommunications (Telecom Cyber Security) Rules,
2024 (Rules), replacing the earlier draft released for public
consultation on 28 August 2024 (see here for our ERGO on the draft rules). The key
changes incorporated in the final Rules are:
1. Definition of 'certified
agency'. The Rules introduce the term
'certified agency', defined as an agency specified
by the Central Government on the designated portal to carry out
security audits. This ensures a standardised security audits,
enhancing telecom cybersecurity through regulatory oversight.
2. Creation of a digital
'portal'. The Rules establish an online
'portal' to facilitate digital implementation,
enabling the Central Government to issue orders, directions, and
other communications. Telecom entities must use this portal to
fulfil their reporting and information submission obligations.
Introduction of this online portal significantly