UPSC CSE Prelims
Question 62
In India, it is legally mandatory for which of the following to report on cyber security incidents ?
- Service providers
- Data centres
- Body corporate
Select the correct answer using the code given below :
View correct answer and explanation
Correct answer: D
Correct Option: D
Explanation: CERT-In’s cyber-security reporting framework extended mandatory incident-reporting obligations to service providers, data centres and body corporates, among other entities.
Statement/Pair-wise Analysis:
Statement/Item 1: Correct - Service providers are covered by cyber-incident notification requirements.
Statement/Item 2: Correct - Data centres are included among entities subject to reporting.
Statement/Item 3: Correct - Body corporates also have reporting duties under the applicable cyber-security framework.
Option-wise Analysis:
A: Incorrect - omits correct statement/items 2, 3.
B: Incorrect - omits correct statement/item 3.
C: Incorrect - omits correct statement/items 1, 2.
D: Correct - includes all and only the true statements/items.
Review Note: The reporting timelines and covered incident categories were updated by CERT-In directions in 2022; 2017 question asks about the earlier regulatory framework.