Telecommunications (Telecom Cyber Security) Rules, 2024

Department of Telecommunications vide notification dated 21st November, 2024 has issued the Telecommunications (Telecom Cyber Security) Rules, 2024. Every telecommunication entity shall implement the following measures to ensure telecom cyber security, namely :—

1. Adopt a telecom cyber security policy.
2. Inform the Central Government on adoption of the policy.
3. Identify and reduce the risks of security incidents and ensure timely responses to such incidents.
4. Take appropriate action for addressing security incidents, and mitigate their impact.
5. Ensure implementation of directions and standards issued by the Central Government on telecom cyber security.
6. Conduct periodic telecom cyber security audits of its network to assess resilience to threats on telecom cyber security through its own mechanisms and through the certified agency in such intervals as may be specified by the Central Government on the portal, and share the audit report with the Central Government, which may undertake further audits if so required.
7. Report security incidents to the Central Government, or any officer authorised in this behalf by the Central Government, and measures taken to address such incidents.
8. Establish facilities such as Security Operations Centre (SOC), by itself or in collaboration with other telecommunication entities, within the time period as may be specified by the Central Government.