- Home
- Security Services
- Security Governance & Compliance
- CERT-In Compliance Support
CERT-In Compliance Support
CERT-In's April 2022 directions require service providers, intermediaries, data centres, body corporates and government organisations to report specified incidents within six hours, keep ICT logs for 180 days in India and sync clocks to approved NTP sources. We put the technical and procedural pieces in place.
What the engagement includes
Applicability review
Which directions apply to your organisation and systems, confirmed with your counsel.
Logging
Collect and retain logs from all ICT systems for 180 days within India.
Time sync
Systems synchronised to NIC or NPL NTP servers, or approved alternatives.
Reporting process
Point of contact, reporting templates and escalation within six hours.
Audit readiness
Support for CERT-In-empanelled audits and evidence packs.
How the engagement runs
Scope
A short discovery call and written scope, so effort, deliverables and price are clear before work starts.
Deliver
Named consultants and engineers deliver against the plan with weekly progress updates.
Validate
Every deliverable is tested and reviewed with you, with evidence you can show auditors.
Improve
Recommendations, handover and options for ongoing support so gains are kept.
Questions we're often asked
Does Colozal Labs certify CERT-In compliance?
No. We implement and document the technical and procedural controls. Legal applicability and interpretation should be confirmed with your legal adviser.
What counts as a reportable incident?
The 2022 directions list incident types including targeted scanning, compromise of critical systems, unauthorised access, ransomware, data breaches and attacks on servers. We help you build that list into your triage process.
Can services be bought without hardware?
Yes. Our consulting, deployment and managed services are vendor-neutral and work with technology you already own.
How is pricing structured?
Fixed-fee for scoped projects, and monthly or annual fees for managed services and AMC. You get a written scope before any commitment.
Not sure where to start?
Talk to a Colozal Labs specialist. We'll listen first, then recommend only what your risk and budget justify.