Preparedness for CERT-In’s directions, including incident-reporting timelines, log retention and security practices.
CERT-In’s directions place specific obligations on organisations, including reporting certain incidents within a tight window and retaining logs for defined periods.
We assess your readiness against these directions, close gaps in your processes and logging, and ensure you can detect, report and respond within the required timelines.
Within mandated timelines.
Meeting required retention periods.
Capability to identify reportable events.
Who does what, and when.
Demonstrating compliance.
The kinds of organisations that rely on this work.
The CERT-In Directions of April 2022 impose specific, time-bound obligations on organisations operating in India — being ready to meet them is a legal requirement, not a best practice.
An orderly lifecycle designed for a credible, defensible result.
Reviewing your current incident-response capability.
Designing reporting to meet the CERT-In six-hour rule.
Reviewing log retention against the CERT-In directions.
Building incident playbooks and escalation paths.
Pressure-testing the plan with a tabletop exercise.
A report on your incident-readiness posture and gaps.
This work maps to the standards and regulatory requirements relevant to you.
What to have in place before we begin.
Explore this offering in detail.
Learn more →Explore this offering in detail.
Learn more →Explore this offering in detail.
Learn more →Back to the full pillar.
View pillar →Let us know your objectives, and we’ll design the engagement around them.
