IT infra in critical sectors needs periodic audits: Prasad

He said enhancing the cyber security as well as information technology infrastructure of financial institutions is an ongoing process

Given the growing usage of information technology (IT) and the internet, there is a need  to have periodic audits of IT infrastructure in critical sectors such as banking and finance, defence, telecom, etc, according to Electronics and IT Minister Ravi Shankar Prasad.

Internet users in India have grown from 302 million in March 2015 to 380 million in January 2016 and are expected to touch 462 million by June 2016. This also means that there is greater danger of fraudsters stealing users’ data and credentials to conduct financial frauds.

Prasad said enhancing security for the cyber space as well as information technology infrastructure of financial institutions is an ongoing process.

The minister said the Indian Computer Emergency Response Team (CERT-In) issues alerts and advisories regarding the latest cyber threats and counter measures on a regular basis. CERT-In is working with key financial organisations, including banks, and is implementing cyber crisis management plan for countering cyber-attacks.

CERT-In is conducting mock drills in coordination with the Reserve Bank of India and banks to enhance the cyber security preparedness of organisations. Prasad was responding to Business Standard’s queries on cyber security and frauds that happen in the banking sector.

The National Critical Information Infrastructure Protection Centre has been established according to the provisions of Section 70A of the Information Technology Act 2000 for protection of critical information infrastructure in the country.

Prasad also said the electronics and information technology ministry would launch an information security education and awareness project to train government personnel and create awareness.

Cells have been set up in all states and Union territories for reporting and investigation of cyber crime cases.

The Information Technology Act, 2000 provides a comprehensive legal framework to address the issues connected with cyber crimes, cyber attacks and security breaches of the country’s IT infrastructure.

RBI, too, issues circulars and advisories to all banks on cyber attacks and preventive measures to tackle the same.