The Indian Computer Emergency Response Team (CERT-In) has issued comprehensive guidelines on information security practices. These guidelines are designed to protect against cyber threats and attacks in today's digital world and apply to various government entities and institutions.
Rajeev Chandrasekhar, Minister of State for Electronics & Information Technology & Skill Development and Entrepreneurship, highlighted the government's commitment to cybersecurity. He emphasised that the government has been undertaking several initiatives to ensure a safe and secure cyberspace. Efforts are being made to strengthen capabilities, systems, human resources, and awareness in the field of cybersecurity.
The guidelines released by CERT-In will serve as a roadmap for government entities and industries to minimise cyber risks, safeguard citizen data, and enhance the overall cybersecurity ecosystem in the country.
The guidelines encompass various security domains, including network security, identity and access management, application security, data security, third-party outsourcing, hardening procedures, security monitoring, incident management, and security auditing.
Furthermore, the guidelines incorporate recommendations prepared by the National Informatics Centre for Chief Information Security Officers (CISOs) and employees of Central Government Ministries/Departments. These additional guidelines aim to promote cybersecurity awareness and good cyber hygiene practices among government officials.
The released guidelines will also serve as an essential document for audit teams, including internal, external, and third-party auditors, to assess an organisation's security posture and compliance with the specified cybersecurity requirements.
Highlighting the significance of these guidelines, Chandrasekhar said, "The guidelines are an important part of our larger cybersecurity framework being built under the leadership of our Prime Minister, Narendra Modi ji, as India takes rapid strides towards a USD 1 Trillion Digital Economy."