Critical telecom infra rules come into effect

Telecom entities whose networks are designated as Critical Telecommunication Infrastructure must give access to government-authorised personnel to inspect hardware, software and data of certified CTI parts, according to new rules that came into effect on November 22. Critical telecom infra rules come into effect The Telecommunications Rules, 2024, were released for public consultation on August 29 under Section 22 of the Telecommunications Act, 2023. In addition, the Information Security Practices and Procedures for Protected System Rules of 2018 under the IT Act have overlapping requirements for organisations with “protected systems”, which are akin to critical information infrastructure. For the notified CTI, the telecom entity must share network architecture details of the CTI; list of authorised personnel who have access to CTI; inventory of hardware and software used in the CTI; details of vulnerabilities; cyber crisis management plans; security audit reports and audit compliance reports; and service level agreements related to the CTI with the government.