Govt may bring out cyber disclosure norms

The days of sweeping security breaches under the rug may soon be over, as the Government plans to bring in legislation that would ensure strict cyber security disclosure norms.

For instance, companies that are affected by hacking might be forced to disclose to its clients the impact of such an incident on the safety of their data and information.

“The Government is working on something like this. We see this happening in India although I can’t say when it will come,” said Shantanu Ghosh, Managing Director, India Product Operations, Symantec, an anti-virus solutions provider.

According to Mr. Ghosh, for companies in the U.S, it is mandatory to disclose the nature and impact of any hacking incident.

“Companies in other countries are also required, by regulation, to keep the Government in the loop in addition to its customers and clients. This must be done even if no vital information has been lost. It is a measure of how serious cyber security has become,” he said, while addressing reporters here at the launch of the Symantec State of Mobility Survey 2013. The company, which works closely with the Centre on security issues, is upbeat on the increased cyber security awareness in the Indian market.

“When we have meetings with the Government, they are very aware of the various security vulnerabilities and hacking threats that they face. However, there is a long way to go for the implementation of proper security barriers. In the consumer market, we are focussing heavily on mobile security solutions ,” Mr. Ghosh said.