Key Features of the Telecom Cybersecurity Rules
- Reporting of Security Incidents:
- Telecom entities must report security incidents to the central government within 6 hours of detection.
- The report should include details of the affected system and a description of the incident.
- Appointment of Chief Telecommunication Security Officer (CTSO):
- Telecom entities are required to appoint a CTSO responsible for managing and overseeing telecommunication cyber security measures.
- Data Disclosure Authority:
- The central government or its authorised agencies are empowered to seek traffic data or other relevant information (excluding the content of messages) from telecom entities.
- IMEI Registration Requirements:
- Manufacturers of devices with an International Mobile Equipment Identity (IMEI) number must register the IMEI number with the government before the first sale of the equipment in India.