DoT notifies cybersecurity rules, sets 6-hour timeline to report incidents

The department of telecommunications (DoT) has mandated telecom companies to report cybersecurity incidents to the government within six hours of becoming aware and additional details on the impact of the incident within 24 hours, according to the Telecom Cyber Security Rules, 2024, under the Telecom Act.

The norms are in line with the CERT-IN guidelines in 2022, which already require the companies to report such incidents within six hours of identification or notification.