(Reasonable & processing of sensitive Security Practice personal data and and Procedure and information Sensitive Personal Implementation of Data or Information) reasonable security practices & code of best practices on a regular basis through independent Auditor once in a year The Information Due diligence by Covered above Technology Intermediary and their (Intermediary liability Guidelines) Rules, Implementation of 2011 reasonable security practices by Intermediary Reporting of Cyber Security Incident to ICERT The Information Requirements to be fulfilled for authentication of Technology to constitute a secure secure electronic records by (Security Digital Signature means of secure digital Procedure) signature. 2004 Public Key / Private card The Information Interception and decryption of Authorization to Govt. Agency to Technology ( information intercept, monitor or decrypt Procedure and information generated, Safeguards for transmitted, received or stored in Interception, computer resources monitoring of Information) Rules 2009
(Reasonable Security Practice and Procedure and Sensitive Personal Data or Information) & processing of sensitive personal data and information Implementation of reasonable security practices & code of best practices on a regular basis through independent Auditor once in a year The Information Technology (Intermediary Guidelines) Rules, 2011 Due diligence by Intermediary and their liability Implementation of reasonable security practices by Intermediary Reporting of Cyber Security Incident to ICERT Covered above The Information Technology (Security Procedure) 2004 Requirements to be fulfilled to constitute a secure Digital Signature for authentication of secure electronic records by means of secure digital signature. Public Key / Private card The Information Technology ( Procedure and Safeguards for Interception, monitoring of Information) Rules 2009 Interception and decryption of information Authorization to Govt. Agency to intercept, monitor or decrypt information generated, transmitted, received or stored in computer resources
Draft-Information-And-Cyber-Security-Framework-For-Insurance-Sector.docx