Computer Emergency Response Team (CERT-In)

Subject: Government organizations

Context:

The reason behind ban of 59 apps is that several citizens had reportedly raised concerns to CERT-In regarding security of data and loss of privacy in using these apps. In addition, the Ministry received recommendations from Indian Cyber Crime Coordination Centre.

Concept:

• CERT-In (the Indian Computer Emergency Response Team) is a government-mandated information technology (IT) security organization created in 2004.
• The purpose of CERT-In is to respond to computer security incidents, report on vulnerabilities and promote effective IT security practices throughout the country.
• According to the provisions of the Information Technology Amendment Act 2008, CERT-In is responsible for overseeing administration of the Act.
• CERT-In has been designated to serve as the national agency to perform the following functions in the area of cyber security:
  • Collection, analysis and dissemination of information on cyber incidents.
  • Forecast and alerts of cyber security incidents
  • Emergency measures for handling cyber security incidents • Coordination of cyber incident response activities.
  • Issue guidelines, advisories, vulnerability notes and whitepapers relating to information security practices, procedures, prevention, response and reporting of cyber incidents.
  • Such other functions relating to cyber security as may be prescribed.

Indian Cyber Crime Coordination Centre

• The scheme to set up Indian Cyber Crime Coordination Centre (I4C) was approved in October 2018, to deal with all types of cybercrimes in a comprehensive and coordinated manner.
• It act as a nodal point in the fight against cybercrime
• It identifies the research problems/needs of LEAs and take up R&D activities in developing new technologies and forensic tools in collaboration with academia / research institutes within India and abroad
• It prevents misuse of cyber space for furthering the cause of extremist and terrorist groups
• It suggests amendments, if required, in cyber laws to keep pace with fast changing technologies and International cooperation and coordinate all activities related to implementation of Mutual Legal Assistance Treaties (MLAT) with other countries related to cybercrimes in consultation with the concerned nodal authority in MHA
• Components Of The I4C Scheme
• National Cybercrime Threat Analytics Unit (TAU)
• National Cybercrime Reporting
• Platform for Joint Cybercrime Investigation Team
• National Cybercrime Forensic Laboratory (NCFL) Ecosystem
• National Cybercrime Training Centre (NCTC)
• Cybercrime Ecosystem Management Unit
• National Cyber Crime Research and Innovation Centre