Cyber security agency cautions govt over engaging foreign IT audit firms

India’s cyber security nodal agency Cert-in has issued an advisory to government organisations over the hiring of foreign companies for their IT security audit and asked them to take clearance from the Home Ministry before roping in such firms.

The Indian Computer Emergency Response Team (Cert-In) in a letter dated November 21 to public organisations said that engaging foreign firms for auditing system of government organisations and critical sectors may expose sensitive information to entities or individuals with foreign links.

“In relation to the process of engaging the CERT-in empanelled IT security auditing organisations, on the advice of Intelligence Bureau/MHA, it is felt necessary to issue the following advisories to ensure that the engagement process is secure and does pose a threat to sensitive date/information belonging to the government and critical sectors,” CERT-In said.