Question

Difficulty: MediumInformation Technology and Cybersecurity

With reference to cybersecurity frameworks and statutory provisions in India under the Information Technology (IT) Act, 2000, consider the following statements:

1. The Indian Computer Emergency Response Team (CERT-In) serves as the national nodal agency for handling cybersecurity incidents under Section 70B.
2. Cyber Appellate Tribunals were established to directly adjudicate criminal offenses under the IT Act carrying life imprisonment penalties.
3. The National Critical Information Infrastructure Protection Centre (NCIIPC) is designated as the nodal agency for protecting critical information infrastructure under Section 70A.

Which of the statements given above is/are correct?

  1. 1 and 3 onlyAnswer
  2. B
    1 and 2 only
  3. C
    2 and 3 only
  4. D
    1, 2 and 3

Answer

Statements 1 and 3 only are correct.
The statement specifying '1 and 3 only' is correct. CERT-In is statutory designated under Section 70B of the IT Act, 2000 to manage cyber threat responses, while NCIIPC is designated under Section 70A to protect critical information infrastructure. Statement 2 is false because tribunal jurisdiction applies to civil appeals arising from orders of Adjudicating Officers, whereas serious criminal offenses are prosecuted in criminal courts.

Step-by-Step Solution

1
Evaluate Statement 1 regarding CERT-In.
Statement 1 is correct. Section 70B of the Information Technology (IT) Act, 2000 explicitly designates CERT-In as the national nodal agency for collecting, analyzing, and responding to computer security incidents.
CERT-In functions under the Ministry of Electronics and Information Technology (MeitY) to issue cyber threat alerts and handle emergency responses.
2
Evaluate Statement 2 regarding Cyber Appellate Tribunals.
Statement 2 is incorrect. Cyber Appellate Tribunals (whose functions were subsequently merged with TDSAT) hear appeals against orders passed by Adjudicating Officers regarding civil compensations and penalties. Criminal offenses punishable with imprisonment under the IT Act are tried by regular criminal courts (Magistrate or Sessions Courts), not tribunals.
Tribunals hold adjudicatory power over civil disputes and monetary penalties, whereas criminal jurisdiction remains strictly with the judicial court system.
3
Evaluate Statement 3 regarding NCIIPC.
Statement 3 is correct. Section 70A of the IT Act, 2000 empowered the Central Government to designate NCIIPC (operating under the National Technical Research Organisation) as the national nodal agency for Critical Information Infrastructure Protection.
NCIIPC safeguards computer systems whose destruction would severely impact national security, economy, or public health.

Key Concept

Statutory Cybersecurity Agencies and Provisions under the IT Act, 2000
Estimated Time:1m 30s
Rate this question