# CERT-In Compliance & Audit

> India

CERT-In (the Indian Computer Emergency Response Team) sets security audit and incident-reporting expectations referenced by RBI, SEBI and ministries - including the requirement to report listed incidents within six hours and retain logs in India. We deliver CERT-In-style audits and reporting support.

## Who needs to comply

Service providers, intermediaries, data centres, banks and govt-facing entities in India.

## Key requirements

- **Audit in expected format** - VAPT, configuration and compliance audit structured for CERT-In acceptance.
- **6-hour incident reporting** - Process and support for CERT-In's mandatory reporting timeline.
- **Log retention** - Guidance on the 180-day in-India log-retention requirement.

---
Related services: https://a5cyber.in/services/cert-in-audit/, https://a5cyber.in/services/vapt/, https://a5cyber.in/services/incident-response/