Cyber security incident reporting mandate India

Under India's Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and subsequent amendments including the Information Technology (Amendment) Rules, 2013, and cyber security incident reporting protocols, multiple entities are mandated to report breaches. Service providers (telecom companies, ISPs), data centres, and body corporate (organizations handling personal or sensitive data) all have legal obligations to report cyber security incidents and data breaches to the Indian Computer Emergency Response Team (CERT-In) and to affected individuals within specific time frames. These reporting requirements were formalized to strengthen India's cyber security posture. All three categories of entities are covered under the mandatory reporting framework. > Cyber Reporting: Service Providers + Data Centers + Body Corporate = Mandatory breach reporting to CERT-In. Answer: (d).