India CERT-In Cyber Security Directions 2022 CERTIN-IncidentReporting-6Hour-Mandatory-Format-POC-20Categories-Section70B-Dir1to4: CERT-In Directions 1-4 Incident Reporting - Mandatory 6-Hour Window + 20 Categories + Standardised Report Format + Designated Point of Contact + 24x7 Channel

Directions 1-4 establish the mandatory incident reporting regime - the highest-profile and most operationally demanding element of the 2022 Directions. Direction 1: Mandatory cyber incident reporting to CERT-In by service providers + intermediaries + data centres + body corporates + government organisations within 6 hours of noticing such incident or being brought to notice about such incident. Direction 2: Expanded list of 20 Cyber Incident Categories that must be reported - (1) Targeted scanning/probing of critical networks/systems; (2) Compromise of critical systems/information; (3) Unauthorised access of IT systems/data; (4) Defacement of website or intrusion into a website and unauthorised changes; (5) Malicious code attacks; (6) Attack on servers + databases + storage + critical infrastructure; (7) Identity Theft + spoofing + phishing attacks; (8) Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks; (9) Attacks on Critical Information Infrastructure + supervisory control and data acquisition (SCADA) and operational technology systems and Wireless networks; (10) Attacks on Cloud Computing; (11) Attacks/incident/breach pertaining to Big Data + Block chain + virtual assets + virtual asset exchanges + custodian wallets + Robotics + 3D and 4D Printing + additive manufacturing + Drones; (12) Attacks/breaches on systems running blockchain; (13) Attacks/incident/breach pertaining to AI/ML systems; (14) Attacks/breach related to Quantum Computing systems; (15) Data Breach; (16) Data Leak; (17) Attacks on Internet of Things (IoT) devices and associated systems/networks/software/servers; (18) Attacks/incidents affecting Safety of human beings; (19) Attack on social media accounts of individuals/organisations; (20) Other categories of cyber incidents based on emerging threats. Direction 3: Reports of cyber incidents shall be submitted in the format provided at Annexure I to CERT-In via incident@cert-in.org.in or by phone or by fax or by online portal at www.cert-in.org.in + Standard Annexure I structure (entity details + incident description + impact + actions taken + IOCs + logs). Direction 4: Designate Point of Contact for the purposes of these directions + Personnel name + Designation + 24x7 contact info (email + phone) + escalation hierarchy + communicate to CERT-In + update on changes. Operational implementation: 24x7 SOC + Cyber Incident Response Team (CIRT) + auto-alert pipeline + escalation triage + executive sponsor + legal + DPO + PR/communications + integration with RBI/SEBI/IRDAI reporting timelines. Coordinates with RBI Cyber Framework 2-6 hour reporting + SEBI System Audit Framework + DPDP Act 2023 Sec 8(6) 72-hour DPBI reporting + IRDAI Cyber Guidelines + sectoral CERTs + I4C (cyber crime + financial fraud). CERT-In Dir 1-4 Incident Reporting applies.