National Information Security Assurance Programme (NISAP)

It has been established for government and critical infrastructures.

Key Highlights: Government and critical infrastructures should have a security policy and create a point of contact mandatory for organizations to implement security control and report any security incident to Cert-In

• Cert-In to create a panel of auditor for IT security.
• All organizations to be subject to a third-party audit from this panel once a year
• Cert-In to be reported about security compliance on periodic basis by the organizations