Cyber security incident (CERT-In)

Any real or suspected adverse event in relation to cyber security that violates an applicable security policy and results in unauthorised access, denial of service or disruption, unauthorised use of a computer resource, or changes to data or information without authorisation. Annexure I of the 2022 Directions lists twenty types you must report to CERT-In within 6 hours, including data breaches and leaks, ransomware and other malware, website defacement, denial of service attacks, attacks on cloud, IoT and AI systems, and incidents affecting digital payments. It is wider than a personal data breach: an incident that touches no personal data still has to be reported.