India’s Ministry of Electronics and Information Technology (MeitY) and the local Computer Emergency Response Team (CERT-In) have extended the deadline for compliance with the Cyber Security Directions introduced on April 28, which were due to take effect yesterday. The Directions require verbose logging of users’ activities on VPNs and clouds, reporting of infosec incidents within six hours of detection – even for trivial things like unusual port scanning – exclusive use of Indian network time protocol servers, and many other burdensome requirements.

Read full article on The Register