India gives local techies 60 days to hit 6-hour deadline for infosec incident reporting India's Computer Emergency Response Team (CERT-In) has given many of the nation's IT shops a big job that needs to be done in a hurry: complying with a new set of rules that require organizations to report 20 different types of infosec incidents within six hours of detection, be they a ransomware attack or mere compromise of a …
Heh...
Good luck with that one!
Imagine trying to get the DFIR team engaged and come up with confirmation of a data breach (data exfil confirmed) and get the lawyers to approve in that little time.
Shit, even transferring clones of compromised VMs can take an hour or two before they're under an analysis's keyboard.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2023
