Govt. Notifies Telecom Cybersecurity Rules

On 21st November 2024, the union government notified new telecom cybersecurity rules aimed at securing communication networks and services through enhanced data reporting and security measures.

Key Points

Cybersecurity Measures: Telecom entities are required to adopt comprehensive cybersecurity policies, including risk management, security safeguards, network testing, and training.
Data Access: The central government and authorized agencies can seek traffic data from telecom entities to ensure cybersecurity, excluding message content, with strict confidentiality and security measures in place.
Security Incident Reporting: Telecom entities must report security incidents within six hours and provide detailed information within 24 hours of discovery, including affected users and remedial actions taken.
Telecom Cybersecurity Officer: Each telecom entity must appoint a Chief Telecommunication Security Officer to oversee cybersecurity measures.
Equipment Registration: Manufacturers of devices with IMEI numbers must register the equipment with the government prior to its first sale in India.