The Hindu Business Line : CERT-in to empanel network security auditors

IN a bid to tackle cyber attacks and make information systems foolproof, Indian Computer Emergency Response Team (CERT-in) has decided to empanel `security auditors' who would identify vulnerabilities in the network infrastructure of various companies and organisations.

According to sources, the agency has already invited bids from IT security firms and expects to finalise the companies by March-end.

"We had a strong response to the initiative and as many as 35-40 companies have responded. We have set up a technical evaluation committee, which is currently scanning the applications," sources added.

The companies appointed would be responsible for undertaking infrastructure audits and work towards identifying network vulnerabilities or gaps, they said. These firms will audit networks, processes, people and technology that form an integral part of information systems of companies, at a rate that may be prescribed by Cert-in.

"We may fix the man day rate, but there will be enough flexibility.

For instance, much would depend on the size of the network that is to be audited and hence the rates would be a function of the number of man days as well as the size of the network to be assessed," sources said.

The bidding process would comprise two rounds, technical and financial. All the companies that qualify in the technical bid round would be asked to make financial bids.

"The companies which qualify will be expected to match the lowest bid quoted by any player in the financial round," they pointed out.

He said the auditors would identify weaknesses in a network but clarified that the firms would not offer advisory services.

This would ensure that the auditing and consulting functions are not mixed up, sources said.

CERT-in was constituted in January last year to tackle any possible hacking or virus attacks on the information systems including the country's vital networks such as power, railways, aviation and defence. It provides reactive and proactive services to enhance cyber security.

Article E-Mail :: Comment :: Syndication :: Printer Friendly Page

Stories in this Section
Impressive client additions in Dec 2004

SPEL Semiconductor to raise authorised capital to Rs 60 cr

Qualcomm lab to come up in Pune

HCL Tech to expand Chennai operations

Odyssey Tech warrants

School for ITES studies in Thiruvananthapuram

Magma in pact with IIIT

Polaris hikes stake in AIG Systems

Rise in Indian Web site defacement in Jan

CERT-in to empanel network security auditors

To serve better

The changing factor

Plethora of business opportunities

Making it happen

Web site for Kerala CM's mass contact scheme

Looking back

Paradyne Info plans IPO at a premium

`Quality vital to retain corporate customers'