Friday, 6 November 2026 · Full edition

CERT-In mandates six-hour reporting window for AI security incidents

What happened

The Indian Computer Emergency Response Team (CERT-In) has introduced a mandatory six-hour deadline for reporting security breaches involving artificial intelligence systems. According to The Indian Express, this directive requires organizations to disclose specified AI-related incidents within the new timeframe.

Why it matters

The requirement forces organizations to significantly accelerate their incident response protocols. Failure to meet the six-hour window could expose businesses operating in India to heightened regulatory scrutiny and potential compliance penalties.

Bigger picture

The mandate signals a shift toward more rigorous oversight of emerging technologies. Regulatory bodies are increasingly tightening reporting standards to address digital security vulnerabilities as AI integration scales across various industries.

Watch next

Monitor upcoming CERT-In implementation guidelines regarding compliance procedures and specific definitions for reportable AI security incidents.

Back to today in 60 seconds

Daily brief + free guide

Understand today. Keep the guide.

Get the day’s most important developments explained every morning. Subscribe and we’ll also send you The World, Explained—an India-first guide to economics, markets, business and geopolitics.

Make 7AM a habitPut the brief one tap from your morning.No app-store download. Opens like an app from your home screen.

Never miss the editionGet one quiet alert when the brief is ready.No breaking-news noise and no repeated notifications.

One alert after each edition is successfully published.