Union government considers granting statutory enforcement authority to the cyber security agency

The government is considering granting the Indian Computer Emergency Response Team (Cert-In) formal enforceable powers to regulate cyber security standards. The proposal under review would transform the agency's operational mandate from advisory oversight to statutory enforcement, though specific statutory amendments or implementation timelines are not stated.

Regulatory enforcement powers allow cyber security agencies to issue binding directives, mandate incident reporting, and penalize non-compliance directly. In practice, regulated entities shift from voluntary reporting frameworks to mandatory compliance protocols, altering organizational liability during security breaches. Chief Information Security Officers and compliance professionals must review existing internal security controls and incident response protocols in anticipation of stricter oversight.

Track upcoming legislative drafts and formal Ministry notifications regarding Cert-In's mandate changes.