Government introduces new guidelines to strengthen cybersecurity

To curb cyber crimes and fraud the Indian government took action to enhance digital security. The Ministry of Communications and Department of Telecommunications (DoT) issued new guidelines to ensure cybersecurity on November 21, 2024.

Mandatory Sharing of Details with the Government

The government can now demand important details from telecom companies in national or public interest matters. This includes providing message content and other information in a prescribed format. Under the new rules, telecom companies are required to report any incident that could pose a cybersecurity threat.

Strict Action Against Cybersecurity Violations; No More Forward Messages

Forwarding fake messages is now classified as a cybercrime. Here are the key highlights of the new regulations include:

• All telecom companies must appoint a Chief Telecom Security Officer (CTSO)
• Companies must implement measures to prevent cyber fraud and share these measures with the government
• The new regulations mandate immediate action within six hours of receiving information about a cyber incident, which must need details with relevant security agencies.

New Directives For Telecom Industry

Telecom companies must provide detailed reports, including numbers, individuals involved, and related data, within 24 hours.

Registration of IMEI numbers is now mandatory, and altering an IMEI number has been declared a punishable offence.

All telecom entities and manufacturers of telecommunication equipment must comply with the obligations of reporting or submitting information to the Central Government through a designated portal or secure mode as specified.