Cert-In issues new guidelines for AI security audits and incident reporting

The Indian cyber security agency Cert-In has released new guidelines for enterprise AI security audits. Under these new regulations, companies will be required to report any AI-related security incident within just six hours. Additionally, companies must classify their systems based on risk and retain audit logs for 180 days, according to a report by Business Standard.

Meanwhile, the government is considering granting Cert-In enforceable powers, reported by The Economic Times.

On the other hand, the threat of AI-driven cyberattacks is increasing globally. The UK's government cyber security agency, the National Cyber Security Centre (NCSC), has warned that by 2028, there is a high possibility of hacking attacks via AI-powered malware on critical national infrastructure such as the UK's power stations, airports, and hospitals. In its annual review, the NCSC stated that Russia and China will begin regular use of AI in cyberattacks.

According to the NCSC, AI technology could increase the risk of ransomware by helping attackers identify targets, find vulnerabilities in IT networks, and write malware code. In a ransomware attack, attackers encrypt files after gaining access to an IT system and demand money in cryptocurrency to return the data or unlock the system. NCSC Chief Executive Richard Horne also warned that there is a realistic possibility of an unprecedented surge in cyber incidents in the coming months. He added that the British military's communication networks are also facing constant daily attacks.

Security experts are advising caution against this risk. According to Alan Woodward, a professor of cyber security at Surrey University, if countries and companies do not use cutting-edge AI technology, attackers will leave them behind. He noted that AI can be used to detect and fix system flaws.

In another technology update, OpenAI has introduced a new feature called 'Locked Chats' for ChatGPT. According to a report by TV9 Gujarati, through this feature, users will be able to lock their private chats, which will not appear in normal chat history or search results. To view these chats, users will have to use a four-digit account PIN or biometric authentication. If a user forgets the PIN and resets it, all locked chats will be permanently deleted, which even OpenAI's support team will not be able to restore.

For youth wishing to build a career in the defence sector, the Indian Army's Northern Command has announced a 75-day internship program for 2026-27. According to a report by Amar Ujala, this program will provide training in fields such as Artificial Intelligence, cyber security, drones, and robotics. Selected candidates will be provided a stipend of ₹75,000 and the last date to apply is 5 November 2026.

Cert-In is the Government of India's nodal cyber security agency that functions to monitor and respond to cyber security related incidents.