2022 · Q70
Consider the following statements with reference to the latest guidelines issued by the Indian Computer Emergency Response Team (CERT-In):
- 1Data centres and service providers shall compulsorily report cyber security breaches within 24 hours.
- 2Virtual Private Network providers shall retain user data for at least five years and share records with authorities when required.
Which of the statements given above is/are correct?
current-eventssci-tech-news
- A1 only
- B2 only
- CBoth 1 and 2
- DNeither 1 nor 2
Explanation
Statement 1 is incorrect as worded: the CERT-In directions of April 2022 require data centres, service providers and intermediaries to report cyber-security incidents within 6 hours, not 24 hours. Statement 2 is correct: VPN service providers must maintain logs/user data for at least five years and furnish them to authorities when required — the provision that drew industry criticism. Therefore only statement 2 is correct — option B (2 only).