The Central Government has recently included Computer Emergency Response Team (CERT-In) in the list of organizations exempted from the Right to Information Act (RTI), 2005. CERT-In is the national agency under the Ministry of Electronics and Information Technology responsible for responding to computer security incidents. The move has raised concerns as it limits transparency for an entity crucial in combating cyber threats and raising security awareness.
Role and Objectives of CERT-In
- CERT-In plays a vital role in quickly responding to computer security incidents. One of its main objectives is to increase security awareness among common citizens.
- The agency works under the Ministry of Electronics and Information Technology, reflecting its importance in securing digital infrastructure and addressing cyber security challenges.
Exemption under RTI Act
- The RTI Act, enacted in 2005, exempts certain intelligence and security organizations from its scope.
- This exemption includes entities listed in the Second Schedule, with a provision to exclude information relating to allegations of corruption and human rights violations. In the recent amendment, CERT-In has been added as the 27th organization exempted under this provision.
Concerns
- The decision to exclude CERT-In from RTI inquiry raises concerns about transparency and accountability, especially in the area of cyber security. As a national nodal agency, the activities of CERT-In are vital to counter cyber threats and ensure the security of critical digital infrastructure.
- The move to protect it from RTI queries could impact the public’s access to information on cyber security incidents, response strategies and overall governance of digital security.
Historical context
- The Second Schedule of the RTI Act was last amended in 2016 with the Strategic Forces Command. Other organizations under the Ministry of Defence, such as the Defense Research and Development Organization and the Border Roads Development Board, are also listed in the Second Schedule.