Government working on cyber security standards; draft on ransomware likely soon

The government is working to come up with cyber security standards for mobile devices and a regulation to tackle ransomware, according to Ajay Kumar, Additional Secretary at the Ministry of of Electronics and Information Technology (MeitY).

"Mobile is a dangerous device and with the kind of data it is leaking, we are setting up two working groups including the RBI and Department of Telecom (DOT) working on cyber security standards for mobile applications and devices. We hope to release it soon," said Kumar.

The decision comes amid reports of data leaks by Chinese phones. The concerns were coupled with the recent cyber breach threats of leaking financial and personal data.

Speaking at a digital money event organised by Payment Council of India and Amazon Pay, the Additional Secretary said that with cases like WannaCry and the recent Locky, "Ransomware is a big issue these days. We are looking at a regulation to tackle ransomware...will come out with a draft soon for inputs from experts."

Kumar also added that reporting of breach is mandatory by law.

The government has also opened a window for banks which can be made aware of infectious messages sent by malwares or bots (web robots). It is also holding workshops and seminars for its cyber security officers.

Besides, it has set up a committee, which is still at initial stages, to work on the usage of Artificial Intelligence and IOT (Internet of Things).

The minister said the government will give preference to domestic cyber security products and "all startups can get their products tested at STQC (Standardisation Testing and Quality Certification) labs for quality assurance as the rates have been reduced by 50 percent than normal rates".

According to Kumar, the payments space is waiting for a new bloom of explosion and suggests innovators to continue disruption despite regulation as government will always be behind the innovators.