CERT-in
Definition
Indian Computer Emergency Response Team. Statutory body under Section 70B IT Act; mandatory reporting of qualifying incidents within 6 hours under the April 2022 directions.
- Full form
- Indian Computer Emergency Response Team
- Legal basis
- Section 70B, IT Act
- Reporting window
- 6 hours for qualifying incidents
- Directive
- April 2022 CERT-In directions
- Status
- Statutory national cybersecurity body
Common questions
What kinds of incidents fall under CERT-In's mandatory 6-hour reporting rule?+
The April 2022 directions list specific categories such as data breaches, ransomware attacks, unauthorised access to critical systems, and DDoS attacks, among others, that entities operating in India must report within the 6-hour window regardless of severity assessment.
How does CERT-In's role differ from a state police cyber cell's role?+
CERT-In is a national technical body focused on incident reporting, coordination and advisories, while state cyber cells conduct criminal investigation and evidence collection. Organisations often report to CERT-In and separately file a police complaint for the same incident.
Related terms
- DPDP Act 2023
- Digital Personal Data Protection Act 2023. India's general data protection statute, in force in phases from 2024. Applies to IoT-collected personal data...
- I4C
- Indian Cybercrime Coordination Centre, the central node under the Ministry of Home Affairs running the National Cybercrime Reporting Portal (cybercrime.gov.in), state cyber...
- Intermediary Safe Harbour
- The conditional immunity under Section 79 IT Act read with the IT Rules 2021. Lost when due diligence and grievance officer obligations...
- IT Act 2000
- The Information Technology Act 2000, the parent Indian statute on computer offences, electronic records and digital signatures. Came into force on 17...
- ITAA 2008
- The Information Technology (Amendment) Act 2008, notified in October 2009. Inserted Sections 66A to 66F and 67A to 67B, expanded Section 69,...