Key Highlights of Telecom Cybersecurity Rules

Source: This post on Key Highlights of Telecom Cybersecurity Rules has been created based on the article “Govt. notifies telecom cybersecurity rules” published in The Hindu on 23rd November 2024.

Why in news?

The central government has introduced telecom cybersecurity regulations to enhance the protection of India’s communication networks and services.

Key Highlights of Telecom Cybersecurity Rules

1. Key measures include specified timelines for telecom operators to report security incidents and disclose relevant details.

2. The central government or its authorized agency can request traffic data or other information (excluding message content) from telecom entities to ensure cybersecurity.

3. The primary objective of the Telecom Cybersecurity Rules is to safeguard India’s communication networks and services against cyber threats.

Rules regarding reporting Security Incidents

1. Appointment of Chief Telecommunication Security Officer (CTSO): Telecom entities are required to designate a Chief Telecommunication Security Officer (CTSO) responsible for overseeing cybersecurity measures within their organization.

2. Incident Reporting: Security incidents must be reported to the central authority within six hours of detection. The report should include details of the affected system and a description of the incident.

3. Detailed Follow-up Report: A detailed follow-up report must be submitted within 24 hours of the initial report.

This follow-up should include: The number of users impacted by the incident, the duration of the incident, the geographical area affected, the extent of the impact on network or service functionality and remedial measures taken or proposed to address the issue.

Government Oversight: The central government or an authorized agency has the authority to request traffic data and other non-message-related data from telecom entities to enhance cybersecurity measures.

Equipment Registration: Manufacturers of devices with International Mobile Equipment Identity (IMEI) numbers are required to register these IMEI numbers with the government before selling their equipment in India.

UPSC Syllabus: Governance