In India, it is legally mandatory for which of the following to report on cybersecurity incidents? 1. Service providers 2. Data centres 3. Body corporate Select the correct answer using the code given below:
Explanation
Statement 1 is Correct: Under Section 70B of the Information Technology Act, 2000, and the CERT-In Rules 2013, service providers are legally required to report cybersecurity incidents to the Indian Computer Emergency Response Team (CERT-In). Statement 2 is Correct: Data centres are explicitly listed as entities that must mandatorily report cybersecurity incidents to CERT-In under the Information Technology (CERT-In) Rules, 2013. Statement 3 is Correct: The IT Act and associated rules mandate that body corporates must report specified types of cybersecurity incidents to CERT-In to ensure national cyber security.