Security News > 2022 > May > Indian stock markets given ten day deadline to file infosec report, secure board signoff

Indian IT shops have been handed another extraordinarily short deadline within which to perform significant infosec work.

MII boards must sign off on lists of critical systems.

Just how one gets a board up to speed to sign off on a list of critical infrastructure ten days after the issuance of a circular is anyone's guess.

Especially because the modified rules were published on Friday, May 20, meaning the ten-day deadline spans two weekends.

The modified rules will likely be most unwelcome at MIIs, as they and all other Indian IT shops are already facing a 60-day deadline to adopt new rules that require reporting of many infosec incidents within six hours of detection, log file retention, and collection of records of customer activities.

India's government slightly reduced the reporting requirements, but the list of information Indian organizsations are required to collect is still long - and the 60-day deadline to be ready for the new reporting requirements was not extended.

News URL

https://go.theregister.com/feed/www.theregister.com/2022/05/25/sebi_modified_mii_infosec_rules/