What are the CERT-In requirements for reporting cyber incidents?

CERT-In directions require organisations in India to report specified cyber incidents within six hours of noticing them, maintain ICT system logs for 180 days within Indian jurisdiction, and synchronise system clocks to NTP servers. Meeting this depends on monitoring and log retention that are actually operating, not merely configured.

How do Indian companies meet international client security requirements?

Usually by evidencing a defined control set: enforced multi-factor authentication, documented patch management, immutable and tested backups, endpoint detection and response, periodic access reviews, and a rehearsed incident response plan. Overseas buyers ask for records rather than assurances, so the evidence trail matters as much as the control.

Why use a Sri Lankan IT provider instead of an Indian one?

For most Indian businesses a local provider is the sensible default. The case for Techx4u is narrower: a security-led managed service where certified engineers deliver the work directly, with a half-hour time difference and experience answering European and American client security questionnaires.

India

Managed IT and cybersecurity services for Indian businesses

Name: Techx4u, Inc
Address: 67 Kurukuattala, Kadugannawa, Kandy, Central Province, 20300, LK
Telephone: +94 81 206 9085
Price range: $

Same time zone, near-identical working day, and a security practice built for the international client questionnaires Indian exporters increasingly have to answer.

Get a quote Call +94 81 206 9085

India has no shortage of IT providers, so the honest question is what a Sri Lankan team adds. The answer is narrow and specific: we operate as a security-led managed service rather than a body shop, and the engineers who hold the certifications are the engineers who do the work.

For Indian businesses serving overseas clients, the pressure point is the same one Sri Lankan exporters face. A European or American customer sends a security questionnaire, and suddenly you need evidence of patching cycles, access reviews and tested restores that nobody has been keeping.

The time zone is effectively identical — thirty minutes apart — so there is no coordination overhead at all.

Why it matters here

What is different about working with us in India

Thirty minutes apart

IST and Sri Lanka Standard Time differ by half an hour. Your working day and ours are the same working day, with no handover and no waiting.

CERT-In incident reporting is a real obligation

Indian directions require reportable incidents to be notified within six hours and logs retained for 180 days. That is an operational discipline, and it needs monitoring and log retention that actually work.

Built for export-facing businesses

If your clients sit in the EU, UK, US or Australia, their security requirements will reach you eventually. We build to that standard from the start rather than retrofitting under audit pressure.

Certifications held by the people doing the work

Certified Ethical Hacker and Microsoft SC-100, SC-200 and AZ-104, verifiable on Credly. Not a sales-side credential wall with a different delivery team behind it.

Common questions

Straight answers

Written to be useful on their own, whether you read them here or somewhere else quotes them.

What are the CERT-In requirements for reporting cyber incidents?: CERT-In directions require organisations in India to report specified cyber incidents within six hours of noticing them, maintain ICT system logs for 180 days within Indian jurisdiction, and synchronise system clocks to NTP servers. Meeting this depends on monitoring and log retention that are actually operating, not merely configured.
How do Indian companies meet international client security requirements?: Usually by evidencing a defined control set: enforced multi-factor authentication, documented patch management, immutable and tested backups, endpoint detection and response, periodic access reviews, and a rehearsed incident response plan. Overseas buyers ask for records rather than assurances, so the evidence trail matters as much as the control.
Why use a Sri Lankan IT provider instead of an Indian one?: For most Indian businesses a local provider is the sensible default. The case for Techx4u is narrower: a security-led managed service where certified engineers deliver the work directly, with a half-hour time difference and experience answering European and American client security questionnaires.

Services

What we deliver in India

Talk to us about India

Tell us what you are running and what worries you. We will come back with a straight assessment and a costed plan.

Get a quote Talk to an engineer