Find My Security Gaps →
Find My Security Gaps →
6-Hour Incident Reporting Capability. Full CERT-In Compliance.
CERT-In (Indian Computer Emergency Response Team) Advisory Services help Indian businesses understand, implement, and maintain compliance with CERT-In's cybersecurity directives — which apply to virtually every organisation with an internet presence in India.
CERT-In's April 2022 directives fundamentally changed the cybersecurity compliance landscape for Indian businesses. The requirements include mandatory 6-hour incident reporting, 180-day log retention within Indian jurisdiction, specific VPN logging requirements, and designated point-of-contact registration. Non-compliance can trigger enforcement actions from CERT-In and referrals to sector-specific regulators.
Verentix guides Indian businesses through the entire CERT-In compliance process — from initial gap assessment through implementation to ongoing maintenance — ensuring you meet requirements without disrupting business operations.
Most Indian businesses we speak to are either unaware of their CERT-In obligations or have only partially implemented the requirements. The 6-hour incident reporting requirement alone requires capabilities that most organisations do not have — real-time threat detection, documented incident response procedures, and a trained response team that can identify, classify, and report incidents within an extremely tight window.
The 180-day log retention requirement creates specific technical challenges — especially for companies using cloud services with data centres outside India. Log localisation, storage capacity planning, and log integrity protection all need to be addressed.
For regulated industries — banking, fintech, insurance, healthcare — CERT-In non-compliance compounds with sector-specific regulatory risks. RBI, SEBI, and IRDAI expect their regulated entities to comply with CERT-In directives, and non-compliance with CERT-In can trigger sector-specific enforcement actions.
Every CERT-In Advisory Services engagement with Verentix delivers concrete, actionable outcomes:
Gap Assessment (Week 1): We map your current security practices against every CERT-In requirement and identify specific gaps. This produces a clear compliance status report showing exactly where you stand.
A fintech startup in Bengaluru achieved full CERT-In compliance in 5 weeks — from zero incident response capability to a tested, documented programme with real-time detection and 6-hour reporting capability.
An insurance company in Mumbai was referred to IRDAI for CERT-In non-compliance after a security incident. We fast-tracked their compliance implementation in 3 weeks and helped them demonstrate remediation to both CERT-In and IRDAI, avoiding further regulatory action.
A SaaS company serving government clients in Delhi needed CERT-In compliance as a prerequisite for a ₹4.5 crore contract. Our advisory service delivered full compliance — including log retention architecture on AWS within Indian regions — in 6 weeks, enabling them to secure the contract.
30-minute free consultation. No obligation. Honest assessment of whether this service is right for your business.