New Delhi: Aimed at safeguarding India's communication network, the Centre on Friday notified the telecom cyber security rules which also empower the central government/its authorised agency to seek traffic data and any other data (other than the content of messages) from a telecom entity to ensure cyber security.
The rules outline several measures including specified timelines for telcos to report security incidents and make disclosures.
"The central government, or any agency authorised by the central government, may, to protect and ensure telecom cyber security, seek from a telecommunication entity, traffic data and any other data, other than the content of messages, in the form and manner as may be specified by the central government on the portal; and direct a telecommunication entity to establish necessary infrastructure and equipment for collection and provision of such data from designated points to enable its processing and storage," the rules say.
Telecom entities would be required to appoint a chief telecommunication security officer and report security incidents within six hours to the Centre along with "relevant details of the affected system including the description of such incident."
Under the rules, every telecom entity will be required to implement specified measures to ensure cyber security, including adopting a telecom cyber security policy (security safeguards, risk management approaches, actions, training, best practices and technologies, to enhance telecom cyber security).