The federal government has started work on establishing a Federal Computer Emergency Response Team. The new body will focus on protecting government systems from cyber threats.
The Federal CERT is being developed to strengthen cybersecurity across federal public institutions. It will help government organisations identify, manage, and respond to cyber incidents.
The National CERT has already started hiring staff for the new team. Recruitment is underway for a director and several cybersecurity specialists.
The new body will operate under the Computer Emergency Response Team Rules, 2023. These rules define the responsibilities and structure of sectoral cybersecurity teams.
The Federal CERT will handle cybersecurity matters involving federal ministries and divisions. Its responsibilities will also cover government departments and other federal organisations.
The scope will extend to autonomous and semi-autonomous public-sector organisations. This will apply where these bodies deal with matters falling under federal subjects.
The federal government plans to place the Federal CERT within the national cybersecurity structure. It will operate as a Sectoral CERT under the National CERT.
The team will work through the Government CERT framework. It will coordinate cybersecurity activities across different federal institutions.
Information sharing will be another important responsibility of the new body. Government organisations will be able to share information about cyber threats and incidents.
The Federal CERT will also monitor emerging cybersecurity threats. It will work to identify possible attacks before they cause significant damage.
The team will coordinate responses when cybersecurity incidents occur. It will also support federal institutions during recovery efforts.
Its responsibilities will include conducting security audits across government systems. It will also carry out vulnerability assessments to identify weaknesses.
The Federal CERT will conduct malware analysis as part of its cybersecurity work. It will also provide support during incident response activities.
System recovery will be another area covered by the new team. The body will assist institutions in restoring systems after cyber incidents.
The federal government also plans to establish a Security Operations Centre. The centre will be staffed by cybersecurity professionals.
The Security Operations Centre will continuously monitor federal digital infrastructure. It will help detect suspicious activity and potential cyber threats.
Federal institutions will also have specific reporting responsibilities under the rules. They must report cybersecurity incidents to the relevant Sectoral CERT.
They must also notify the National CERT about detected incidents. The notification must be made within one hour of identifying an incident.
The reporting requirement is intended to support faster cybersecurity responses. Early reporting can help authorities coordinate action across affected institutions.
The new cybersecurity structure will also support regular compliance reporting. Information about compliance and cybersecurity incidents will be compiled periodically.
According to the rules, these reports will be submitted to the Prime Minister twice each year. They will provide updates about cybersecurity compliance and reported incidents.
The federal government is establishing the Federal CERT as part of broader cybersecurity efforts. The initiative aims to strengthen protection for important public-sector digital systems.
The recruitment of specialists is an initial step toward establishing the new team. Further implementation will involve setting up its operational and monitoring capabilities.
Once operational, the Federal CERT will serve as a central cybersecurity coordination body. It will connect federal institutions with the wider national cybersecurity framework.
In other related news also read Federal Government Announces Electric Bike Scheme
The initiative is expected to strengthen threat monitoring and incident response across federal organisations. It will also create a structured process for reporting and managing cyber incidents.
