UPSC Prelims 2017·GS1·polity-and-governance·governance

In India, it is legally mandatory for which of the following to report on cyber security incidents? 1. Service providers 2. Data centres 3. Body corporate Select the correct answer using the code given below:

Dalvoy logo
Reviewed by Dalvoy
UPSC Civil Services preparation
Last updated 23 May 2026, 3:31 pm IST
  1. A1 only
  2. B1 and 2 only
  3. C3 only
  4. D1, 2 and 3Correct

Explanation

In India, the legal framework mandates reporting of cybersecurity incidents by various entities. The Information Technology (IT) Act, 2000, and subsequent rules and directions issued by authorities like CERT-In (Indian Computer Emergency Response Team), lay down these requirements. Specifically, the IT Act empowers the government to issue directions for reporting cyber incidents. CERT-In's directions, issued under Section 70B of the IT Act, make it legally mandatory for a wide range of entities to report cybersecurity incidents to CERT-In. These entities typically include: 1. Service providers (e.g., internet service providers, telecom operators, online service providers) 2. Data centres (facilities that house computer systems and associated components) 3. Body corporate (any company or organization, including those with critical infrastructure) All these categories are generally required to report cybersecurity incidents to ensure a coordinated national response to cyber threats and vulnerabilities.
polity-and-governance: In India, it is legally mandatory for which of the following to report on cyber security incidents? 1. Service providers

Related questions

More UPSC Prelims practice from the same subject and topic.