Date: 27-Jul-2023Category: Extra OrdinaryState: Union GovernmentCountry: India
Declaration of certain computer resources relating to identified CIIs of NCRB and the computer resources of their associated dependencies as protected systems
The Ministry of Electronics and Information Technology has declared specific computer resources related to crime tracking, fingerprint identification, and terrorism monitoring as 'protected systems' under the Information Technology Act, 2000.
This notification designates the computer resources of the Crime & Criminal Tracking and Network System (CCTNS), National Automated Fingerprint Identification System (NAFIS), and Integrated Monitoring of Terrorism (I-MoT) as Critical Information Infrastructure of the National Crime Records Bureau.
It also specifies who is authorized to access these protected systems.
Key Changes
The Central Government, using powers under Section 70(1) and 70(2) of the Information Technology Act, 2000, has declared certain systems as protected.
The systems now designated as protected include those relating to CCTNS, NAFIS, and I-MoT, which are considered Critical Information Infrastructure of the National Crime Records Bureau.
Access to these protected systems is restricted to: (a) NCRB employees authorized in writing by the NCRB; (b) Team members of contractual managed service providers or third-party vendors authorized in writing by the NCRB for need-based access; and (c) Consultants, regulators, Government officials, auditors, and stakeholders authorized in writing by the NCRB on a case-by-case basis.
The notification takes effect from the date of its publication, July 27, 2023.
Impact Analysis
National Crime Records Bureau (NCRB)
Action Item: Review and update existing security protocols to align with the 'protected system' designation. Implement stricter access control measures and maintain detailed logs of system access.
Contractual Managed Service Providers and Third-Party Vendors
Action Item: Ensure all relevant team members obtain necessary written authorization from NCRB. Establish clear communication channels with NCRB regarding access requirements.
Government Officials, Regulators, Auditors, and Stakeholders
Action Item: Understand the authorization process for accessing protected systems and plan accordingly. Submit access requests to NCRB well in advance of needing the information.
Citizens
Action Item: None
Key Entities Referenced
Ministry of Electronics and Information Technology: The issuing authority of the gazette notification.
National Crime Records Bureau (NCRB): The primary entity responsible for the CCTNS, NAFIS, and I-MoT systems, which are now designated as protected systems.
Information Technology Act, 2000: The legal framework under which the notification is issued, specifically referencing Section 70.
Crime & Criminal Tracking and Network System (CCTNS): A system related to crime and criminal tracking.
National Automated Fingerprint Identification System (NAFIS): A system for automated fingerprint identification.
Integrated Monitoring of Terrorism (I-MoT): A system for integrated monitoring of terrorism.
रजिस्ट्री स.ं डी.एल.- 33004/99 REGD. No. D. L.-33004/99
xxxGIDHxxx
सी.जी.-डी.एल.-अ.-27072023-247655
xxxGIDExxx
CG-DL-E-27072023-247655
असाधारण
EXTRAORDINARY
भाग II—खण् ड 3—उप-खण्ड (ii)
PART II—Section 3—Sub-section (ii)
प्राजधकार स ेप्रकाजित
PUBLISHED BY AUTHORITY
स.ं 3231] औई दिल्ली, बृहस्ट्प जतवार, िुलाई 27, 2023/िावण 5, 1945
No. 3231] NEW DELHI, THURSDAY, JULY 27, 2023/SHRAVANA 5, 1945
इलक्टे र ॉजऔक ूर सप औा प्रोगिकीजगक रलं ालय
अजधसप औा
औई दिल्ली, 27 िुलाई, 2023
का.आ. 3377(अ).—केंद्रीय सरकार, स पऔा प्रोगिकीजगक अजधजऔयर, 2000 (2000 का 21) क धारा 70 क उप-
धारा (1) ूर उप-धारा (2) द्वारा प्रित्त िजियों का प्रयीग करत े हुए, राष्ट्रीय अपराध ररकॉडड ब्य री क औािुक स पऔा
अवसंरपऔा हीऔे के कारण अपराध एव ं अपराधी रैककंग ूर औेटवकड प्रणाली (क्राइर एंड दक्रजरऔल रैककंग एंड औेटवकड
जसस्ट्टर), राष्ट्रीय स्ट्वपाजलत अंगुल जपन्ह पहपाऔ प्रणाली (औिे औल ऑटीरेरटड क ंगर प्प्रंट आइडेंरटद केिऔ जसस्ट्टर) ूर
आतंकवाि क इंटीग्रेटेड रॉजऔटररंग (इंटीग्रेटेड रॉजऔटररंग ऑ टेरररज्र) से संबंजधत कंप्य टर संसाधऔों एवं उऔस े सहयुि
आजितताओं के कंप्य टर संसाधऔों की उि अजधजऔयर के प्रयीिऔों के जलए एतद्द्वारा संरजित प्रणाली घीजित करती ह ै ूर
जऔम्नजलजखत व्यजियों की संरजित प्रणाजलयों तक पहुपं बऔाऔे के जलए प्राजधकृत करती ह,ै अर्ाडत्:-
(क) संरजित प्रणाली तक पहुपं बऔाऔे के जलए, राष्ट्रीय अपराध ररकॉडड ब्य री द्वारा जलजखत रूप र ें प्राजधकृत
राष्ट्रीय अपराध ररकॉडड ब्य री का कीई अजभजहत करडपारी;
(ख) संजविा रक प्रबंजधत सेवा-प्रिाता या तृतीय पिकार जवक्रेता के िल का कीई सिस्ट्य जिसे आवश्यकता के
आधार पर पहुपं बऔाऔे के जलए राष्ट्रीय अपराध ररकॉडड ब्य री द्वारा जलजखत रूप र ें प्राजधकृत दकया गया
ह;ैूर
(ग) रारला िर रारला के आधार पर, राष्ट्रीय अपराध ररकॉड ड ब्य री द्वारा जलजखत रूप र ें प्राजधकृत कीई
परारिी, जवजऔयारक, सरकारी पिाजधकारी, संपरीिक ूर पणधारी।
2. यह अजधस पऔा रािपल रें इसके प्रकािऔ क जतजर् स ेप्रभावी हीगी।
[ ा. सं. 2(5)/2022-सीएल-भाग(2)]
संिीप पटिी, वैज्ञाजऔक ‘िी’
4863 GI/2023 (1)2 THE GAZETTE OF INDIA : EXTRAORDINARY [PART II—SEC. 3(ii)]
MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY
NOTIFICATION
New Delhi, the 27th July, 2023
S.O. 3377(E).—In exercise of the powers conferred by sub-sections (1) and (2) of section 70 of the
Information Technology Act, 2000 (21 of 2000), the Central Government hereby declares the computer resources
relating to the Crime & Criminal Tracking and Network System (CCTNS), National Automated Fingerprint
Identification System (NAFIS), Integrated Monitoring of Terrorism (I-MoT), being Critical Information Infrastructure
of the National Crime Records Bureau, and the computer resources of their associated dependencies, to be protected
systems for the purposes of the said Act and authorises the following persons to access the protected systems,
namely:—
(a) any designated employee of the National Crime Records Bureau authorised in writing by the National
Crime Records Bureau to access the protected system;
(b) any team member of contractual managed service provider or third-party vendor who have been
authorised in writing by the National Crime Records Bureau for need-based access; and
(c) any consultant, regulator, Government official, auditor and stakeholder authorised in writing by the
National Crime Records Bureau on case to case basis.
2. This notification shall come into force on the date of its publication in the Official Gazette.
[F. No. 2(5)/2022-CL-Part(2)]
SANDIP CHATTERJEE, SCIENTIST ‘G’
Uploaded by Dte. of Printing at Government of India Press, Ring Road, Mayapuri, New Delhi-110064
and Published by the Controller of Publications, Delhi-110054.