State/Sectoral CSIRT

Definitions

a) "CSIRT" means Computer Security Incident Response Teams that works on understanding, preventing and responding to Computer security incidents, issues guidelines, advisories and directions to prevent and respond to Computer security incidents related to a particular sector or a part of the constituency under the National CERT.

b) "State CSIRT" means CSIRT established by the Nodal ministry and agency approved by the State/Union Territory Government. Its Constituency will be same as the legal constituency of the State/Union Territory.

c) "Sectoral CSIRT" means the CSIRT established by the agencies approved by the Nodal Ministry of the Sector under the Central Government. Its constituency will be based upon the agencies notified by the Nodal ministry of the corresponding Sector.

Mandate

According to Sub-section (10), clause (a) of the Information Technology (The Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rules, 2013 and clause (E) point (2) of Sub-section (IV) for creating mechanisms for Security threat early warning, vulnerability management and response to security threats in the National Cyber Security Policy 2013, CERT-In functions as the umbrella organization in enabling creation and operationalization of Sectoral and State CSIRTs as well as facilitating communication and coordination actions in dealing with cyber crisis situations.

Role of CERT-In in Establishment of State/Sectoral CSIRTs

1. CERT-In is issuing the necessary guidelines and providing support for setting up of sectoral CSIRTs and state CSIRTs.

2. Providing guidance and hand-holding to operationalise 24x7 sectoral CSIRTs for all coordination and communication actions within the respective sectors for effective incident response & resolution and cyber crisis management.

State CSIRTs

Based on the CERT-In guidelines and support to establish the State/Sector CSIRTs, West Bengal CSIRT has started its operation from 8th July 2019.

West Bengal CSIRT

Sectoral CSIRTs

CSIRT for Finance Sector

CSIRT-Fin (Computer Security Incident Response Team-Finance Sector) has been made operational under the umbrella of CERT-In by utilizing resources of CERT-In from 15th May, 2020.

CSIRT-Fin

CSIRT for Power Sector

For managing the cyber security incidents in Power Sector, Computer Security Incident Response Team Power Sector (CSIRT-Power) is notified and it will be setup in the Central Electricity Authority (CEA) functioning under the administrative control of Ministry of Power (MoP). CERT-In is providing the requisite leadership for the CSIRT-Power to coordinate all the incident and other cyber security activities in Power sector.

CEA