robot: Update article (please report if you notice any mistake or error in this edit) |
Ajay Kumar (talk | contribs) m Updated the article +/- |
||
| Line 1: | Line 1: | ||
{{Short description|Indian government cybersecurity agency}} | |||
{{use dmy dates|date=October 2013}} | {{use dmy dates|date=October 2013}} | ||
{{Infobox government agency | {{Infobox government agency | ||
| Line 56: | Line 57: | ||
| map_captionĀ Ā = Ā | | map_captionĀ Ā = Ā | ||
}} | }} | ||
The '''Indian Computer Emergency Response Team''' ('''CERT- | The '''Indian Computer Emergency Response Team''' ('''CERT-In''' or '''ICERT''') is an office within the [[Ministry of Electronics and Information Technology]] of the [[Government of India]].<ref name="meity -- icert"/> It is the nodal agency to deal with cyber security threats like [[hacker|hacking]] and [[phishing]]. It strengthens security-related defence of the Indian Internet domain. Ā | ||
== Background == | == Background == | ||
CERT-IN was formed in 2004 by the Government of India under [[Information Technology Act, 2000]] Section (70B) under the Ministry of Communications and Information Technology. CERT-IN has overlapping | CERT-IN was formed in 2004 by the Government of India under [[Information Technology Act, 2000]] Section (70B) under the Ministry of Communications and Information Technology. CERT-IN has overlapping responsibilities with other agencies such as [[National Critical Information Infrastructure Protection Centre|National Critical Information Infrastructure Protection Centre (NCIIPC)]] which is under the National Technical Research Organisation (NTRO) that comes under the Prime Minister's Office and the National Disaster Management Authority (NDMA) which is under Ministry of Home Affairs.<ref>{{Cite web|title=India's Cyber Security Policy and Organisation ā A Critical Assessment|url=https://www.indiannavy.nic.in/sites/default/themes/indiannavy/images/pdf/resources/article_6.pdf|url-status=live}}</ref> | ||
== Functions == | == Functions == | ||
In December 2013, CERT-In reported there was a rise in | In December 2013, CERT-In reported there was a rise in cyber attacks on Government organisations like [[banking]] and [[finance]], oil and gas and emergency services. It issued a list of security guidelines to all critical departments.<ref>{{cite news|title=As cyber attacks rise, government sounds alert|url=http://www.thehindu.com/news/national/as-cyber-attacks-rise-government-sounds-alert/article5501672.ece|newspaper=The Hindu|date=26 December 2013|location=New Delhi, India}}</ref> It liaisons with the Office of National Cyber Security Coordinator, National Security Council and National Information Board in terms of the nation's cyber security and threats. As a nodal entity, Indiaās Computer Emergency Response Team (CERT-in) plays a crucial role under the Ministry of Electronics and Information Technology(MeitY). | ||
Ā | |||
September 2022, CERT-In hosted exercise 'Synergy'Ā in collaboration with Cyber Security Agency, Singapore. It had a participation of 13 countries and was conducted as a part of the International Counter Ransomware Initiative-Resilience Working Group.<ref>{{Cite web |title=CERT-In hosts Cyber Security Exercise "Synergy" for 13 countries as part of International Counter Ransomware Initiative- Resilience Working Group |url=https://pib.gov.in/pib.gov.in/Pressreleaseshare.aspx?PRID=1855771 |access-date=2023-01-23 |website=pib.gov.in}}</ref> | |||
== Agreements == | == Agreements == | ||
A memorandum of understanding (MoU) was signed in May | A memorandum of understanding (MoU) was signed in May 2016 between the Indian Computer Emergency Response Team (CERT-In) and the Ministry of Cabinet Office, UK. Ā | ||
Earlier CERT-In signed MoUs with similar organisations in about seven countries - Korea, Canada, Australia, Malaysia, Singapore, Japan and Uzbekistan. Ā | Earlier CERT-In signed MoUs with similar organisations in about seven countries - Korea, Canada, Australia, Malaysia, Singapore, Japan and Uzbekistan. Ā | ||
Ministry of External Affairs has also signed MoU with Cyber Security as one of the areas of cooperation with [[Shanghai Cooperation Organisation]]. With the MoUs, participating countries can exchange technical information on Cyber attacks, | The Ministry of External Affairs has also signed MoU with Cyber Security as one of the areas of cooperation with [[Shanghai Cooperation Organisation]]. With the MoUs, participating countries can exchange technical information on Cyber attacks, respond to cybersecurity incidents and find solutions to counter the cyber attacks. They can also exchange information on prevalent cyber security policies and best practices. The MoUs helps to strengthen the cyber space of signing countries, capacity building and improving the relationship between them.<ref>{{Cite web|url=http://pib.nic.in/newsite/PrintRelease.aspx?relid=149372|title = Cabinet apprised of MoU between CERT-In India and CERT-UK}}</ref> | ||
== Incidents and reports == | == Incidents and reports == | ||
In March 2014, CERT-In reported a critical flaw in [[Android Jelly Bean]]'s [[VPN]] implementation.<ref>{{cite news|date=2 March 2014|title=Android's Jelly Bean, Kit Kat under cyber threat in India: CERT-In|newspaper=NDTV|location=New Delhi, India|url=http://www.ndtv.com/article/india/android-s-jelly-bean-kit-kat-under-cyber-threat-in-india-cert-in-490293}}</ref> | In March 2014, CERT-In reported a critical flaw in [[Android Jelly Bean]]'s [[VPN]] implementation.<ref>{{cite news|date=2 March 2014|title=Android's Jelly Bean, Kit Kat under cyber threat in India: CERT-In|newspaper=NDTV|location=New Delhi, India|url=http://www.ndtv.com/article/india/android-s-jelly-bean-kit-kat-under-cyber-threat-in-india-cert-in-490293}}</ref> | ||
In July 2020, | In July 2020, CERT-In warned Google Chrome users to immediately upgrade to the new Chrome browser version 84.0.4147.89. Multiple vulnerabilities that could allow access to hackers were reported.<ref>{{Cite news|last=IANS|date=2020-07-21|title=Update your Google Chrome browser now to avoid hackers, says CERT-In|work=Business Standard India|url=https://www.business-standard.com/article/technology/update-your-google-chrome-browser-now-to-avoid-hackers-says-cert-in-120072100333_1.html|access-date=2021-06-16}}</ref> | ||
In April 2021, issued a "high severity" rating advisory on the vulnerability detected on WhatsApp and WhatsApp Business for Android prior to v2.21.4.18 and WhatsApp and WhatsApp Business for iOS prior to v2.21.32.<ref>{{Cite web|title=WhatsApp Users Warned of Flaw That Could Leak Their Personal Data|url=https://gadgets.ndtv.com/apps/news/whatsapp-user-data-breach-leak-security-flaw-vulnerability-cert-in-advisory-2416759|access-date=2021-06-16|website=NDTV Gadgets 360|language=en}}</ref> | In April 2021, issued a "high severity" rating advisory on the vulnerability detected on WhatsApp and WhatsApp Business for Android prior to v2.21.4.18 and WhatsApp and WhatsApp Business for iOS prior to v2.21.32.<ref>{{Cite web|title=WhatsApp Users Warned of Flaw That Could Leak Their Personal Data|url=https://gadgets.ndtv.com/apps/news/whatsapp-user-data-breach-leak-security-flaw-vulnerability-cert-in-advisory-2416759|access-date=2021-06-16|website=NDTV Gadgets 360|language=en}}</ref> | ||
According to the agency, India faced 11.5 million cyberattack incidents in 2021 including corporate attacks, and attacks on critical infrastructure and government agencies.<ref>{{cite news |url=https://www.thehindu.com/business/Industry/us-cybersecurity-provider-sentinelone-opens-india-office-in-bengaluru/article65529464.ece |title=US cybersecurity provider SentinelOne opens India office in Bengaluru |date=2022-06-15 |work=[[The Hindu]]}}</ref> | According to the agency, India faced 11.5 million cyberattack incidents in 2021 including corporate attacks, and attacks on critical infrastructure and government agencies.<ref>{{cite news |url=https://www.thehindu.com/business/Industry/us-cybersecurity-provider-sentinelone-opens-india-office-in-bengaluru/article65529464.ece |title=US cybersecurity provider SentinelOne opens India office in Bengaluru |date=2022-06-15 |work=[[The Hindu]]}}</ref> | ||
December 4 2022, CERT-In was called in to investigate the cyber attack on [[All India Institute of Medical Sciences, New Delhi|All India Institute of Medical Sciences (AIIMS), Delhi.]] | |||
==References== | ==References== | ||
Revision as of 00:20, 26 September 2023
| File:CERT-In logo.png | |
| Agency overview | |
|---|---|
| Formed | 19 January 2004[1][2] |
| Headquarters | New Delhi, India[3] 28Ā°35ā²11ā³N 77Ā°14ā²22ā³Eļ»æ / ļ»æ28.58639Ā°N 77.23944Ā°E |
| Motto | Handling Cyber Security Incidents |
| Agency executive |
|
| Parent department | Ministry of Electronics and Information Technology |
| Website | cert-in |
The Indian Computer Emergency Response Team (CERT-In or ICERT) is an office within the Ministry of Electronics and Information Technology of the Government of India.[3] It is the nodal agency to deal with cyber security threats like hacking and phishing. It strengthens security-related defence of the Indian Internet domain.
Background
CERT-IN was formed in 2004 by the Government of India under Information Technology Act, 2000 Section (70B) under the Ministry of Communications and Information Technology. CERT-IN has overlapping responsibilities with other agencies such as National Critical Information Infrastructure Protection Centre (NCIIPC) which is under the National Technical Research Organisation (NTRO) that comes under the Prime Minister's Office and the National Disaster Management Authority (NDMA) which is under Ministry of Home Affairs.[5]
Functions
In December 2013, CERT-In reported there was a rise in cyber attacks on Government organisations like banking and finance, oil and gas and emergency services. It issued a list of security guidelines to all critical departments.[6] It liaisons with the Office of National Cyber Security Coordinator, National Security Council and National Information Board in terms of the nation's cyber security and threats. As a nodal entity, Indiaās Computer Emergency Response Team (CERT-in) plays a crucial role under the Ministry of Electronics and Information Technology(MeitY).
September 2022, CERT-In hosted exercise 'Synergy' in collaboration with Cyber Security Agency, Singapore. It had a participation of 13 countries and was conducted as a part of the International Counter Ransomware Initiative-Resilience Working Group.[7]
Agreements
A memorandum of understanding (MoU) was signed in May 2016 between the Indian Computer Emergency Response Team (CERT-In) and the Ministry of Cabinet Office, UK.
Earlier CERT-In signed MoUs with similar organisations in about seven countries - Korea, Canada, Australia, Malaysia, Singapore, Japan and Uzbekistan.
The Ministry of External Affairs has also signed MoU with Cyber Security as one of the areas of cooperation with Shanghai Cooperation Organisation. With the MoUs, participating countries can exchange technical information on Cyber attacks, respond to cybersecurity incidents and find solutions to counter the cyber attacks. They can also exchange information on prevalent cyber security policies and best practices. The MoUs helps to strengthen the cyber space of signing countries, capacity building and improving the relationship between them.[8]
Incidents and reports
In March 2014, CERT-In reported a critical flaw in Android Jelly Bean's VPN implementation.[9]
In July 2020, CERT-In warned Google Chrome users to immediately upgrade to the new Chrome browser version 84.0.4147.89. Multiple vulnerabilities that could allow access to hackers were reported.[10]
In April 2021, issued a "high severity" rating advisory on the vulnerability detected on WhatsApp and WhatsApp Business for Android prior to v2.21.4.18 and WhatsApp and WhatsApp Business for iOS prior to v2.21.32.[11]
According to the agency, India faced 11.5 million cyberattack incidents in 2021 including corporate attacks, and attacks on critical infrastructure and government agencies.[12]
December 4 2022, CERT-In was called in to investigate the cyber attack on All India Institute of Medical Sciences (AIIMS), Delhi.
References
- ā "techtarget.in". Retrieved 21 October 2013.
- ā "first.org- About CERT-In". Retrieved 23 October 2013.
- ā 3.0 3.1 "meity.gov.in -- CERT-In". Retrieved 21 October 2013.
- ā "Who's who". Ministry of Electronics and Information Technology. Retrieved 31 May 2017.
- ā "India's Cyber Security Policy and Organisation ā A Critical Assessment" (PDF).
{{cite web}}: CS1 maint: url-status (link) - ā "As cyber attacks rise, government sounds alert". The Hindu. New Delhi, India. 26 December 2013.
- ā "CERT-In hosts Cyber Security Exercise "Synergy" for 13 countries as part of International Counter Ransomware Initiative- Resilience Working Group". pib.gov.in. Retrieved 23 January 2023.
- ā "Cabinet apprised of MoU between CERT-In India and CERT-UK".
- ā "Android's Jelly Bean, Kit Kat under cyber threat in India: CERT-In". NDTV. New Delhi, India. 2 March 2014.
- ā IANS (21 July 2020). "Update your Google Chrome browser now to avoid hackers, says CERT-In". Business Standard India. Retrieved 16 June 2021.
- ā "WhatsApp Users Warned of Flaw That Could Leak Their Personal Data". NDTV Gadgets 360. Retrieved 16 June 2021.
- ā "US cybersecurity provider SentinelOne opens India office in Bengaluru". The Hindu. 15 June 2022.
| Agencies |
|  | ||||||
|---|---|---|---|---|---|---|---|---|
| Companies |
| |||||||
| Autonomous Societies |
| |||||||
| Ministers |
| |||||||
| Ministers of State |
| |||||||
 | This article about government in India is a stub. You can help Bharatpedia by expanding it. |