Lok Sabha Question No. 504 (UNSTARRED), answered on 2017-07-19
Subject: CERT-In
Ministry: ELECTRONICS AND INFORMATION TECHNOLOGY
Asked by: ELUMALAI VELLAIGOUNDER

## GOVERNMENT OF INDIA

## MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY

## LOK SABHA

## UNSTARRED QUESTION NO. 504

TO BE ANSWERED ON: 19.07.2017

## CERT-IN

## 504             SHRI V. ELUMALAI:

Will the Minister of Electronics & Information Technology be pleased to state:-

- (a)        whether  the  Government  has  asked  all  digital  payment  agencies  to  report  to  CERT-In  (Computer Emergency Response Team) regarding any unusual activity that they see on their platforms and if so, the details thereof;
- (b)    whether the Government is undertaking a massive programme to create awareness among administrators, judges etc. and if so, the details thereof;
- (c)     whether to strengthen cyber security, the Government has approved various new posts in CERT-In and State CERTs; and
- (d)    if so, the details thereof?

## ANSWER

## MINISTER OF STATE FOR ELECTRONICS AND INFORMATION TECHNOLOGY (SHRI P.P. CHAUDHARY)

- (a):  All organisations providing digital payment services have been mandated to report cyber security incidents expeditiously to Indian Computer Emergency Response Team (CERT-In), a statutory  body under IT Act, 2000.
- (b):    Government  is  undertaking  following  initiatives  to  create  awareness  among  administrators,  judges  etc. namely:-
- (i) Government  has  set  up  cyber  forensic  training  and  investigation  labs  in  the  States  of  Kerala,  Assam, Mizoram, Nagaland, Arunachal Pradesh, Tripura, Meghalaya, Manipur and Jammu & Kashmir for training of law enforcement personnel and Judiciary in these States.
- (ii) Industry associations such as Data Security Council of India (DSCI), NASSCOM, Cyber Forensic Labs, set up in certain States,  have taken  up  tasks  of  awareness  creation and training  programmes  on  Cyber  Crime investigation.  Academia like National Law School, Bangalore and NALSAR University of Law, Hyderabad are also engaged in conducting several awareness and training programmes on Cyber Laws and Cyber crimes for judicial officers.
- (iii) Ministry of Electronics and Information Technology is implementing 'Information Security Education and Awareness (ISEA)' project to train professionals / government officials and create mass information security awareness among citizens. The Project is implemented by 52 institutions across the country. 20,369 persons had either been trained or were undergoing training in various formal/non-formal courses focusing on Cyber Security till 2016. Through direct training programs 3,718 Government personnel have been trained. So far, C-DAC  Hyderabad  has  conducted  458  Awareness  workshops  for  various  user  groups  covering  51,225 participants  from  24  States  and  2  UTs  including  7,559  participants  from  Central/State  Government  and police.
- (iv) CERT-In and Centre for Development of Advanced Computing (C-DAC) are involved in providing basic and  advanced  training  to  law  enforcement  agencies,  Forensic  labs  and  judiciary  on  the  procedures  and methodology of collecting, analysing and presenting digital evidence.
- (v) CERT-In  is  conducting  cyber  security  trainings  for  IT  /  cyber  security  professionals  including  Chief Information  Security  Officers  (CISOs)  of  Government  and  critical  sector  organisations.  18  such  training programs were conducted covering 580 participants during the year 2016. In addition a workshop on security of digital payments systems has been conducted for stakeholder organisations covering 110 participants.

(c)  and  (d):  To  strengthen  cyber  security,  during  the  period  from  April,  2014  to  March,  2017,  the  following numbers  of  posts  in  CERT-In,  Ministry  of  Electronics  and  Information  Technology  (MeitY)    have  been created/revived/ transferred with the approval of Ministry of Finance, Department of Expenditure, namely:-

- i. Department of expenditure vide I.D. No. 291642/E.Coord. 1 (2)/2016 dated  15.11.2016 has created 20 S&T posts for Cyber Swachhta Kendra, a project under CERT-In.
- ii. Department of Expenditure vide I.D. No. 312896/E.Coord.I/2016 dated 19.12.2016 has created 65 S&T and Non-S&T posts for National Cyber Coordination Centre under CERT-In.
- iii. 26 numbers of S&T and Non-S&T posts for CERT-In have been revived in 2016.
- iv. 8 numbers of S&T posts for CERT-In have been revived in 2016.
- v. Beside above 22 S&T posts have been/being transferred by MeitY to CERT-In in phased manner. These were  created  for  CERT-In  activities  in  the  year  2006  while  CERT-In  was  a  project  of  the  then Department of Electronics and Information Technology.

*******