CERT-In 6-Hour + DPDP Breach Response Kit

Name: CERT-In 6-Hour + DPDP Breach Response Kit
Brand: EdgeBefore
Price: 7999 INR

The first six hours decide how the next six months go. This kit tells you what to do in each of them.

EdgeBefore CERT-In 6-Hour and DPDP Breach Response Kit cover

When a cyber incident hits an Indian organisation, the CERT-In clock is already running: six hours from the moment you notice it. Banks and NBFCs have their own six-hour DAKSH report. SEBI-regulated entities, insurers and telecom operators each have their own route. And from about 13 May 2027, the DPDP Rules add notice to the Data Protection Board, a detailed report within 72 hours, and a notice to every affected person.

The CERT-In 6-Hour + DPDP Breach Response Kit puts all of it in one place: the rules, the clocks, the decisions and the documents. Every legal statement is cited to the official text.

What’s inside

Four files. One response plan.

The Breach Response Guide

331 pages, more than 300 of them practical content.

Regulator-by-regulator chapters: CERT-In Directions and FAQs, the Data Protection Board under the DPDP Act and Rules, SEBI (CSCRF and LODR Regulation 30), RBI (2026 Directions for banks and NBFCs), IRDAI, telecom, NCIIPC, CSIRT-Fin and police
A first-hour decision tree and an hour-by-hour playbook from T0 to day 30
A RACI, communications sequencing, evidence and chain of custody, 180-day log readiness and time synchronisation
Incident families: AI agents, leaked API keys and payment-API abuse, software supply chain, deepfake fraud, email and identity takeover, cloud, insider and accidental disclosure, DDoS and outages, mobile apps and social media, web shells
Sector playbooks: fintech and NBFCs, listed companies, healthcare, SaaS and cloud, law and CA firms, e-commerce, IT services and BPO, manufacturing and OT, education and edtech, government and PSUs
Case walk-throughs based only on what regulators, government or the companies themselves published, plus clearly labelled hypothetical scenarios
Cross-border clocks where verified: EU GDPR, UK GDPR, NIS2, Singapore PDPA, Australia NDB, US SEC
Sixteen borderline reporting decisions worked through
Glossary, index and a numbered list of every source

Templates (30 pages)

CERT-In report worksheet and update, sector regulator sheet (SEBI, RBI, IRDAI, telecom), DPB intimation and 72-hour report drafts (marked as effective from ~May 2027), notices to individuals (email, SMS, web), board brief, vendor notice and information demand, holding statement and service script, LODR Reg 30 worksheet, and a full incident log.

Checklists (16 pages)

The first six hours, 180-day log readiness, a complete three-hour tabletop exercise script, and the post-incident review.

Quick-reference card (1 page)

Every clock, the contacts and the twenty Annexure I incident types on one landscape page for the wall or the war room.

All files are print-quality PDFs, current to 23 October 2026.

Who it’s for

The people running the response.

CISOs and security leads, compliance officers and company secretaries, DPOs and privacy teams, general counsel, founders and CTOs of start-ups, and the managed service providers who support them.

Why teams use it

Built on primary sources. Directions, Acts, Rules, circulars and advisories, with every legal statement cited. Where something could not be verified, the kit says so rather than guess.
Clear about dates. Every obligation is labelled In force or From ~13 May 2027, so you prepare for DPDP without filing under rules that are not yet in force.
Written for the people running the response. Plain English, short checklists, ready-to-fill templates.
Current with 2026 threats. Includes CERT-In’s October 2026 advisories on AI agents and payment-API abuse, and the 2026 supply-chain incidents.

Price

One price. Everything included.

Breach Response Kit

₹7,999

Guide, templates, checklists and quick-reference card (PDF)
Instant download as a single ZIP, right on the page after payment

Final price in INR. Secure payment by Cashfree. Instant download: the page you land on right after payment has your download button.

Questions

Before you buy.

Is this legal advice?

No. The kit is general information to help you plan and run incident response. It is not legal advice and does not replace advice from a qualified advocate on your facts. No regulatory or other outcome is guaranteed.

Is DPDP breach reporting already in force?

The DPDP Rules were notified on 13 November 2025. Rule 7 (breach intimation) comes into force eighteen months after publication, which is about 13 May 2027. The kit marks every DPDP template accordingly. CERT-In’s six-hour rule and 180-day log requirement have applied since the Directions of 28 April 2022 took effect.

We’re a small company. Does this apply to us?

CERT-In’s FAQ explains that “body corporate” includes any company, firm or sole proprietorship engaged in commercial or professional activities. The guide includes a chapter on building a response capability for small organisations.

How current is it?

Current to 23 October 2026. Laws and portals change, so always check the official text before you rely on it.

What format are the files?

PDF: guide, templates, checklists and quick-reference card, delivered as a single ZIP.

Can we share it across our organisation?

The kit is licensed for internal use by the purchasing organisation.

EdgeBefore · General information, not legal advice. No outcome is guaranteed.