ScienceTop StoryTop StoryLatest News
Cert-In Calls for AI Security Audits, Six-Hour Incident Reporting by Firms
Sentiment: NeutralHigh Priority
What Happened?
The Indian Computer Emergency Response Team (Cert-In) has issued guidelines mandating that all AI-related security incidents be reported within six hours. The guidelines classify AI systems based on risk levels and outline audit requirements for enterprises.
Key points
- Cert-In requires reporting of AI-related security incidents within six hours.
- AI systems must be classified as low, moderate, high, or critical risk.
- Factors for classification include severity, autonomy, and data sensitivity.
- Enterprises must conduct audits across nine domains, including data quality and AI model risk management.
- Logs must be maintained for 180 days for forensic readiness.
- Companies must ensure traceability of data used in AI models throughout their lifecycle.
Key insights
- The guidelines may lead to improved incident response times for AI-related issues.
- Companies may face increased scrutiny and accountability regarding AI governance.
- The requirement for detailed audits could drive better data management practices.
Why it matters
These guidelines could enhance the security and accountability of AI systems in India.
Tags
Entities
Cert-In· OrganizationIndia· Country
Source
Business Standard
