CERT-In issues “Guidelines on Information Security Practices” for Government Entities for Safe & Trusted Internet
Recently the Indian Computer Emergency Response Team (CERT-In) has issued “Guidelines on Information Security Practices” for Government Organizations.
CERT-In has issued guidelines under Section 70B of the Information Technology (IT) Act, 2000.
These guidelines apply to all Ministries, Departments, Secretariats and Offices specified in the First Schedule to the Government of India (Allocation of Business) Rules, 1961 as well as to their attached and subordinate offices.
These guidelines provide a roadmap for government institutions and industries. It has the following objectives-
- Mitigating cyber risk,
- Protect citizen data and
- Improve cyber security system in the country.
Main Guidelines –
- Designating a Chief Information Security Officer (CISO) for IT Security
- Formulation of cyber security policy.
- Assign tasks and responsibilities to the CISO and a dedicated cyber security implementation team.
- Undertake internal and external audit of the entire Information and Communication Technology (CT) infrastructure. Also, implementing appropriate security arrangements based on the results of the audit.
- Ensuring proper physical separation of sensitive and wireless networks.
- Data backup policy should be documented, determined and monitored.
CERT-IN
Indian Computer Emergency Response Team (CERT-IN)
It is the national nodal agency for responding to computer security incidents. It has been established under the provisions of Section 70B of the IT Act, 2000 under the Ministry of Electronics and Information Technology.
India’s other measures for cyber security –
- National Cyber Security Policy 2013
- Indian Cyber Crime Coordination Center (14C) etc.
Source – PIB
