CERT-In

Polity & Governance glossary

Also called: Indian Computer Emergency Response Team · Topic: Statutory, Regulatory and Quasi-judicial Bodies · NCERT: Beyond NCERT

Meaning

CERT-In (Indian Computer Emergency Response Team) is the national nodal agency for cyber security incidents. A nodal agency is the main body in charge of one task. It works under the Ministry of Electronics and Information Technology (MeitY) and gets its legal role from the Information Technology Act, 2000. Its job is technical. It tracks threats to computer systems and networks, warns people through alerts and advisories (official notes on what to fix or avoid), and helps organisations respond when they are attacked. It matters because it is the body that protects the systems themselves, not the body that catches the criminals.

Example

Suppose a weakness is found in software that many government offices and banks use. CERT-In sends out an advisory telling them to update the software, and it helps any organisation that has already been hacked. If a citizen loses money in a "digital arrest" scam instead, they call helpline 1930 or file a complaint on cybercrime.gov.in. State police then investigate that complaint, and CERT-In is not involved.

Don't confuse with

  • Indian Cyber Crime Coordination Centre (I4C): an attached office of the Ministry of Home Affairs (MHA), not MeitY. It coordinates how cybercrime is handled as a crime. It runs the National Cyber Crime Reporting Portal and the CFCFRMS system for freezing stolen money. CERT-In deals with security incidents, while I4C deals with crimes and the police response.

Read more