In India, it is legally mandatory for which of the following to report on cyber security incidents? 1. Service providers 2. Data centres 3. Body corporate Select the correct answer using the code given below:

In India, the legal framework mandates reporting of cybersecurity incidents by various entities. The Information Technology (IT) Act, 2000, and subsequent rules and directions issued by authorities like CERT-In (Indian Computer Emergency Response Team), lay down these requirements.

Specifically, the IT Act empowers the government to issue directions for reporting cyber incidents. CERT-In's directions, issued under Section 70B of the IT Act, make it legally mandatory for a wide range of entities to report cybersecurity incidents to CERT-In. These entities typically include:

1. Service providers (e.g., internet service providers, telecom operators, online service providers)

2. Data centres (facilities that house computer systems and associated components)

3. Body corporate (any company or organization, including those with critical infrastructure)

All these categories are generally required to report cybersecurity incidents to ensure a coordinated national response to cyber threats and vulnerabilities.