CERT In (Indian Computer Emergency Response Team), Importance

CERT In (Indian Computer Emergency Response Team) serves as a national nodal agency that responds to computer security incidents in India whenever and wherever they occur. The 2008 amendment to the Information Technology Act 2000 designates CERT-In as a national agency that collects, analyses, and disseminates various types of cyber incidents occurring in India.

CERT-In has been active since January 2004. Its mandate is not limited to public cyber agencies only, but also includes the security of the Indian cyber community as a whole. The Indian Computer Emergency Response Team (CERT-In) functions under and with authority delegated by the Department of Electronics and Information Technology (under MeitY).

CERT In Full Form

CERT-In full form stands for “Indian Computer Emergency Response Team.” It's the national agency responsible for responding to computer security incidents in India. CERT-In serves as the central point of contact for the Indian cyber community during major computer security events.

CERT In (Indian Computer Emergency Response Team)

CERT-In (Indian Computer Emergency Response Team) serves as the national authority responsible for handling cybersecurity incidents and responding to various cyber threats across India. Established in 2004 under the Ministry of Electronics and Information Technology (MeitY), CERT-In plays a pivotal role in securing the nation's cyberspace.

• CERT-In serves as the primary agency in India for reporting and responding to cybersecurity incidents. It offers 24/7 security services to the Indian cyber community, which includes government agencies, critical infrastructure operators, and the private sector.
• In 2008, an amendment to the Information Technology Act 2000 officially designated CERT-In as the national authority responsible for gathering, analysing, and sharing data on cybersecurity incidents, highlighting its critical role in strengthening India’s cybersecurity infrastructure.
• CERT-In plays a crucial role in addressing cyber incidents and is aligned with the Budapest Convention's objectives of enhancing cross-border cooperation and information sharing.
  • The Budapest Convention is the first international treaty designed to combat cybercrime by harmonising national laws and improving cooperation between nations. 
• The 2022 India Ransomware Report by CERT-In revealed a 53% increase in ransomware incidents compared to 2021, primarily affecting the IT, manufacturing, and finance sectors.

‹ ›

CERT In Functions

CERT-In functions encompass the collection, analysis, and dissemination of cyber incident information, issuing forecasts and alerts, coordinating response activities, providing guidelines and advisories, and ensuring constant reporting and prevention of cyber threats.

• Collection, analysis and dissemination of information on cyber incidents.
• Forecasts and alerts of cybersecurity incidents
• Emergency measures for handling cybersecurity incidents
• Coordination of cyber incident response activities.
• CERT-In issues guidelines and advisories as well as vulnerability notes and whitepapers relating to information security practices and procedures.
• CERT-In is tasked with monitoring, responding to, and preventing cyber incidents on an ongoing basis.
• Other functions related to cybersecurity may be prescribed to CERT-In.

CERT In Importance

CERT-In (Indian Computer Emergency Response Team) is vital for India's cybersecurity landscape. It manages incidents, provides threat intelligence, enhances capacity building, fosters international collaboration, advises on policies, and raises public awareness to safeguard the nation from cyber threats.

• National Cybersecurity Coordinator: CERT-In serves as the key agency responsible for managing cybersecurity incidents and coordinating national responses to significant cyber threats and attacks.
• Threat Intelligence: By gathering and analysing data on cyber incidents, CERT-In delivers essential threat intelligence to various stakeholders within India’s cyber ecosystem.
• Capacity Building: CERT-In works to bolster the cybersecurity skills of government entities and operators of critical infrastructure through a range of training programs and cybersecurity exercises.
• International Collaboration: CERT-In represents India in global cybersecurity discussions and partners with international organisations to tackle cross-border cyber threats.
• Policy Advisor: CERT-In contributes technical expertise in developing national cybersecurity policies and strategies. It also supports organisations in recovering from cybersecurity incidents and minimising their effects.
• Public Awareness: CERT-In raises public awareness about cybersecurity issues by providing guidelines and advisories. It empowers individuals and organisations with the knowledge needed to protect themselves from cyber threats.

CERT In Related Projects

CERT-In has launched several initiatives to strengthen India's cybersecurity framework, including Cyber Swachhta Kendra, Cyber Abhyas Suvidha, and directives for incident reporting, promoting skill development, awareness, and digital ecosystem protection.

Cyber Swachhta Kendra

Cyber Swachhta Kendra (CSK), also known as the Botnet Cleaning and Malware Analysis Centre, is a critical initiative launched by CERT-In to improve India's cybersecurity infrastructure. CSK was launched as part of the Digital India program to create a secure cyber ecosystem by detecting botnet infections and facilitating system cleaning. CSK operates under Section 70B of the Information Technology Act 2000 and works closely with various stakeholders to combat cyber threats.

Cyber Abhyas Suvidha (CAS) Advanced Skill Development Platform

Cyber Abhyas Suvidha (CAS), launched by CERT-In, is an advanced skill development platform to meet India's growing demand for cybersecurity professionals. This platform aims to close the cybersecurity skills gap by offering high-quality training and hands-on experience to aspiring professionals and current practitioners.

Cyber Surakshit Bharat Initiative

Cyber Surakshit Bharat Initiative, launched by the Ministry of Electronics and Information Technology (MeitY), Government of India, aims to raise awareness about cybercrime and strengthen the capabilities of Chief Information Security Officers (CISOs) and frontline IT personnel in various government departments. It stands as a pioneering public-private partnership, with leading tech companies like Intel and Microsoft playing key roles in its creation.

Indian Cyber Crime Coordination Centre (I4C)

Indian Cyber Crime Coordination Centre (I4C) has been set up under the Ministry of Home Affairs (MHA) to address cybercrime across the country in a unified and comprehensive way. I4C aims to improve coordination among law enforcement agencies (LEAs) and various stakeholders, focusing on resolving cybercrime issues that affect citizens. It has also launched the Cyber Crime Volunteers Program, providing a platform for patriotic citizens eager to contribute to the nation by assisting in the fight against cybercrime.

CERT In Directives

In April 2022, CERT-In issued guidelines for information security practices, procedures, cyber incident prevention, response, and reporting to ensure a safe and trustworthy internet under the provisions of Section 70b of the Information Technology Act of 2000. Key points of this directive include:

• Mandatory reporting of cybersecurity incidents must occur within six hours of detection.
• Synchronisation of all ICT (Information and Communication Technology) system clocks is required with the Network Time Protocol (NTP) servers of the National Informatics Centre (NIC) or the National Physical Laboratory (NPL).
• Maintaining logs of all ICT systems is required for a rolling period of 180 days.
• Cryptocurrency exchanges, virtual asset service providers, and custodian wallet operators must retain customer data for at least five years or longer.
• VPN service providers, data centres, and cloud service providers must register with CERT-In.

CERT In UPSC PYQs

Q: What are the different elements of cyber security? Keeping in view the challenges in cyber security, examine the extent to which India has successfully developed a comprehensive National Cyber Security Strategy. (UPSC Mains 2022)

Q: Discuss the potential threats of Cyber attacks and the security framework to prevent it. (UPSC Mains 2017)

Q3: In India, it is legally mandatory for which of the following to report on cybersecurity incidents? (UPSC Prelims 2017)

1. Service providers 
2. Data centres
3. Body corporate 

Select the correct answer using the code given below: 

(a) 1 only

(b) 1 and 2 only

(c) 3 only

(d) 1, 2 and 3

Ans: (d)