The Economic Times, June 26, 2022

By Aashish Aryan

India’s power corridors are abuzz again with a number of policies and legislations which are set to directly impact how technology and internet companies conduct their business in the country. These policies include Information Technology Rules, 2021, Cert-IN guideline, National Data Governance Framework and Data Protection Bill.

Amongst others, another bone of contention between the government and enterprises is the Cert-In directive on reporting cybersecurity incidents and how virtual private network (VPN) service providers should operate. In a statement shared with regards to Cert-IN guidelines, Venkatesh Krishnamoorthy, country manager, India at BSA, The Software Alliance said, “We are concerned about the broad scope of notifiable cyber incidents, the lack of a risk-based threshold, and the short timeline for reporting. These provisions will undermine incident investigation and response, including the deployment of defensive measures.”

Read More>> 

Original Posting: https://economictimes.indiatimes.com/tech/information-tech/policy-conundrum-the-impact-on-indian-tech-firms/articleshow/92450022.cms