File No: 2(35)/2011-CERT-In
Ministry of Communication and Information Technology
Department of Electronics and Information Technology
FeO
OI
6)
To mandate security audit of critical information infrastructure on a periodic basis.
7)
To mandate certification for all security roles right from CISO / CSO to those involved
in operation of critical information infrastructure.
8)
To mandate secure application / software development process (from design through
retirement) based on global best practices.
. Promotion of Research & Development in cyber security
)
To
undertake
Research
&
Development
programs
for addressing
all aspects
development aimed at short term, medium term and long term goals.
&
Development
programs
shall
address
all
aspects
trustworthy systems, their testing, deployment and
including
of
The Research
development
of
maintenance throughout the life
cycle and include R&D on cutting edge security technologies.
To
encourage
Research
&
Development
to
produce
cost-effective,
tailor-made
indigenous security solutions meeting a wider range of cyber security challenges and
target for export markets.
3)
To facilitate transition, diffusion and commercialisation of the outputs of Research &
Development
into commercial
products
and
services for use
in public and
private
sectors.
To set up Centres
of Excellence
in areas
of strategic importance
for the point of
security of cyber space.
To
collaborate
in
joint
Research
&
Development
projects
with
industry
and
academia in frontline technologies and solution oriented research.
Reducing supply chain risks
))
To
create
and
maintain testing
infrastructure and
facilities for IT security product
evaluation and compliance verification as per global standards and practices.
2)
To build trusted relationships with product / system vendors and service providers for
improving end-to-end supply chain security visibility.
3)
To create awareness
security
among
of the threats, vulnerabilities and consequences
entities for managing
supply
chain
risks
of breach of
related to IT (products,
systems or services) procurement.
Page 8 of 10