CERT-In has established a six-hour reporting deadline for incidents related to AI security, aiming to enhance cybersecurity measures.
Why it matters: The new guidelines by CERT-In are crucial for enhancing cybersecurity in AI systems, which are increasingly being targeted by cybercriminals. This development is significant for understanding India's cybersecurity framework and its response to AI-related threats.
New Reporting Guidelines for AI Security Incidents
The Indian Computer Emergency Response Team (CERT-In) has introduced a six-hour reporting deadline for AI-related security incidents. This move aims to bolster cybersecurity measures by ensuring timely disclosure of incidents, thereby allowing for quicker responses and mitigation.
Framework for AI System Security
The guidelines establish a comprehensive framework for assessing AI system security. AI systems are categorized into four risk levels: low, moderate, high, and critical. This classification influences the frequency and depth of security audits, which must cover nine domains, including governance, data management, and AI model risk management.
Background and Implications
These guidelines expand on CERT-In's 2022 directions, reflecting growing concerns over AI's cybersecurity implications. Recent incidents have highlighted vulnerabilities in AI systems, with cybercriminals increasingly using AI tools to exploit these weaknesses. The guidelines emphasize the need for organizational accountability and continuous monitoring.
Key facts
- CERT-In mandates six-hour reporting for AI security incidents.
- The guidelines build on 2022 cybersecurity directions.
- AI systems are classified into four risk categories.
- Security audits must cover nine domains.
- Security logs must be retained for 180 days.
In this story
Source: Read the original