India - How to report Critical Infrastructure Vulnerability?

National Critical Information Infrastructure Protection Centre (NCIIPC) is an organisation of the Government of India created under Sec 70A of the Information Technology Act, 2000 (amended 2008), through a gazette notification on 16th Jan 2014 based in New Delhi, India. It is designated as the National Nodal Agency in respect of Critical Information Infrastructure Protection.

Protection of Critical Information Infrastructure entails a multi-stakeholder approach. NCIIPC engages with Industry, Academia and Independent Cyber Security Professionals in order to address current trends, threats and challenges. NCIIPC supports various avenues for engagement.

NCIIPC also runs Responsible Vulnerability Disclosure Program (RVDP)

NCIIPC hosts Vulnerability Disclosure Form at its website nciipc.gov.in. You may fill up the required fields in the Form and submit the same to: rvdp@nciipc.gov.in along with relevant documents, screenshots, urls etc. 

By reporting a vulnerability in Critical Sector, you become a part of NCIIPC extended family. NCIIPC duly acknowledges contribution appropriately. However, in case you wish to remain anonymous it would respect your privacy.

You can share any newly discovered vulnerability related to Critical Information Infrastructure on rvdp@nciipc.gov.in. 

You may additionally call 24x7 Toll free number: 1800-11-4430