- Law
- India
- In progress
CERT-In: Ready
Self-assessed by IdeaScore. Not certified by an outside body.
The Indian Computer Emergency Response Team's directions on incident reporting and logs.
In place
- Our Security page commits us to report incidents to CERT-In where the law requires.
- The audit log and sign-in history record who did what and when.
Work in progress
- A 6-hour incident reporting process, with a written runbook, a form and a named contact.
- Logs kept for 180 days, inside India.
- Server clocks set from standard time servers, with a record of the setting.
- A yearly drill.
Evidence
- Incident reporting runbookBeing prepared
Limits
- The Directions ask for logs kept in India for 180 days. Our application logs are not kept in India yet. Until they are, this entry stays in progress.
Bring Your Questions to a Product Specialist
A 30-minute walkthrough of the Trust Centre, the Data and Privacy card and the Decision Trail, with your committee's questions.