In India, it is legally mandatory for which of the following to report on cyber security incidents?S

Q: What is UPSC Prelims?

UPSC Prelims is a competitive examination conducted in India. This question is from the 2017 UPSC Prelims Science & Technology paper.

Q: How can I prepare for UPSC Prelims Science & Technology?

To prepare for UPSC Prelims Science & Technology, practice previous year questions (PYQs), understand concepts thoroughly, and solve mock tests regularly. This 2017 question covers Information Technology – AI, ML, Blockchain & Cybersecurity topic.

Q: What is the difficulty level of this question?

This UPSC Prelims 2017 Science & Technology question has a hard difficulty level and is marked as an important question.

Q: Where can I find more UPSC Prelims previous year questions?

You can find more UPSC Prelims previous year questions on AspirantMitraa. Browse by subject, topic, year, and difficulty level to practice effectively.

Question

In India, it is legally mandatory for which of the following to report on cyber security incidents?Service providersData centresBody corporateSelect the correct answer using the code given below:

Accepted Answer

Correct Answer: D — 1, 2 and 3Solution:Under the Information Technology Act, 2000 (as amended), the Indian Computer Emergency Response Team (CERT-In) serves as the national nodal agency for cybersecurity. According to the provisions of this Act, it is legally mandatory for all of the following entities to report cybersecurity incidents to CERT-In: service providers, intermediaries, data centres, body corporates, and individuals. Any failure to report or comply with CERT-In's directives is punishable with imprisonment of up to one year or a fine of up to one lakh rupees, or both. Therefore, all three — service providers, data centres, and body corporates — are legally required to report cyber incidents. ✓Why other options are incorrect:Options A, B, C: All these options exclude one or more entities that are equally covered under the legal obligation to report cybersecurity incidents to CERT-In.Key Concept: CERT-In (established under Section 70B of the IT Act, 2000) is India's national cybersecurity agency under the Ministry of Electronics and Information Technology (MeitY). In April 2022, CERT-In issued directions mandating reporting of cybersecurity incidents within 6 hours of detection — one of the strictest timelines globally. Organisations are also required to maintain logs for 180 days and report incidents including data breaches, ransomware attacks, malware infections, and unauthorised access. This question tests awareness of India's cybersecurity legal framework — an increasingly important area as cyber threats to critical infrastructure grow.

In India, it is legally mandatory for which of the following to report on cyber security incidents?Service providersData centresBody corporateSelect the correct answer using the code given below:

Master UPSC Prelims with Our Test Series

More Questions from Information Technology – AI, ML, Blockchain & Cybersecurity

Frequently Asked Questions

In India, it is legally mandatory for which of the following to report on cyber security incidents?Service providersData centresBody corporateSelect the correct answer using the code given below:

Master UPSC Prelims with Our Test Series

More Questions from Information Technology – AI, ML, Blockchain & Cybersecurity

Frequently Asked Questions