On 27 September 2024, the Central Government of India initiated a public consultation on the Draft Telecommunications (Telecom Cyber Security) Rules, 2024. The Draft Rules, underpinned by the Telecommunications Act, 2023, mandate that telecommunication entities adopt cyber security policies, report security incidents, and establish infrastructure for monitoring and mitigating cyber threats. The Draft Rules also require telecommunication entities to report security incidents within 6 hours of occurrence and set out the criteria for information that must be provided in the report.
Original source