The Department of Telecommunications on 22nd November, 2024 has issued the Telecommunications (Critical Telecommunication Infrastructure) Rules, 2024. As per the rules, every telecommunication entity shall provide the details in respect of Critical Telecommunication Infrastructure, including the following details, namely:–
- Telecommunication network architecture of the Critical Telecommunication Infrastructure;
- Authorised personnel having access to Critical Telecommunication Infrastructure;
- Inventory of hardware, software and spares related to Critical Telecommunication Infrastructure;
- Details of vulnerability, threat or risk analysis for the cyber security architecture of Critical Telecommunication Infrastructure;
- Cyber Crisis Management Plan for Critical Telecommunication Infrastructure;
- Security audit reports and audit compliance reports of Critical Telecommunication Infrastructure;
- Service Level Agreements (SLAs) of services pertaining to Critical Telecommunication
Infrastructure; - All logs relating to Critical Telecommunication Infrastructure to assist in detection of anomalies and enable the Central Government to generate intelligence on real time basis; and
- Reporting of security incidents within the timelines specified for Critical Telecommunication Infrastructure.