CERT-In · Incident Response · BFSI SOP
The 6-Hour Clock Is Already Running: CERT-In Incident Reporting SOP for BFSI
CERT-In's 6-hour reporting mandate isn't a deadline you plan for during an incident — it's a deadline you must have already planned for. This is the complete SOP for Indian banks, NBFCs, and payment aggregators.
6 hrs
Reporting deadline
44
Reportable incident types
₹1L/day
Penalty for non-compliance
72 hrs
DPDP parallel clock