UPSC Prelims 2017 · GS Paper I
Question 85: Science and Technology
In India, it is legally mandatory for which of the following to report on cyber security incidents ?
- 1.Service providers
- 2.Data centres
- 3.Body corporate
Select the correct answer using the code given below :
AnswerUPSC’s answer is (d).
Under Section 70B of the Information Technology Act, 2000 and the CERT-In rules of 2013, the Indian Computer Emergency Response Team is the national agency for cyber security incidents. The rules oblige service providers, intermediaries, data centres and body corporates to report cyber security incidents to CERT-In. So all three listed categories must report. Remember: the mandate covers service providers, data centres and body corporates.
- 1. Service providers must report incidents to CERT-In.
- 2. Data centres must report incidents.
- 3. Body corporates must report incidents.
How you could have got this
- If you were sure statement 1 is correct, (c) goes: it leaves 1 out.
What you needed to know: Service providers must report incidents to CERT-In.
- Then, if you were sure statement 3 is correct, (a) and (b) go: each of them leaves 3 out.
What you needed to know: Body corporates must report incidents.
Only (d) is left. You didn’t need statement 2.
Which options go is worked out from UPSC’s key and the options, not by a model.
Why each option is right or wrong
- (a) Incomplete: data centres and body corporates must also report.
- (b) Incomplete: body corporates must also report.
- (c) Incomplete: service providers and data centres must also report.
- (d) Right: all three must report cyber security incidents.
Answer: UPSC’s key. Explanation: written by UPSC Grade, not by UPSC.
Source: UPSC, Civil Services (Preliminary) Examination 2017, General Studies Paper I, Series A. The paper on upsc.gov.in.