ABC Ltd. is a steel manufacturing company having multiple production units and branch offices across the country. The company has Oracle's Enterprise Resource Planning (ERP) system implemented and fully operational. The

CS Professional · Information Technology and Systems Audit · PYQS · December 2018
ABC Ltd. is a steel manufacturing company having multiple production units and branch offices across the country. The company has Oracle's Enterprise Resource Planning (ERP) system implemented and fully operational. The ERP system is hosted on a Datacenter located in Mumbai. The company always promotes the Technology up-gradation and implements state-of-art technology in its office automation. The company has been winning the Best Manufacturing Company Award for the last 5 years. The company's Top Management wants to make the Datacenter as a protected system according to new Information Technology (Information Security Practices and Procedures for Protected System) Rules, 2018 as per the notification dated 22nd May, 2018 of Ministry of Electronic and Information Technology (MEITY). Based on the above, answer the following: What would be the responsibilities of ISSC of the company to compliance for having a protected system ?

Answer & Explanation:

The ISSC shall be the apex body and its responsibilities (as mentioned under Rule 3(2)) shall be as follows: All the information security policies of a Protected System has to be approved by the ISSC. Any significant change in the network configuration which has an impact on the Protect System shall be approved by ISSC. It is mandatory that each significant change in the application(s) of the Protected System shall be approved by ISSC. A mechanism has to be established which ensures timely communication of the cyber incident(s) related to Protected System to the ISSC. Protected System shall be validated for assessment after every 2 (two) years.

Topics: Information Technology Act, 2000

Open in Interactive Practice Hub · Full Practice Hub · Chapter Weightage · More in this subject

Related Questions in this Topic