Unwinding Cert-In's Directions On Cyber Security Practices And Reporting Of Cyber Incidents

With data leaks, ransomware attacks and other cyber security incidents becoming increasingly rampant and around 18% (eighteen per cent) of Indians being victims of such cyber security incidents¹, one would expect the Indian Computer Emergency Response Team ("CERT-In") - "the trusted referral agency for cyber users in India for responding to cyber security incidents²" to be major part of the discourse on cyber security in India. On the contrary, thus far, the CERT-In has not been nearly as conspicuous or pro-active as other Indian governmental agencies in exercising its powers until recently when it issued 'Directions relating to information security practices, procedure, prevention, response, and reporting of cyber incidents' ("the Directions") and explanatory FAQs thereunder ("the FAQs")³.