Layer 1 · SOC leads · CISOs — triage and reporting
CERT-In 26 Reportable Incident Types
Every CERT-In reportable incident category with examples and the 6-hour clock trigger.
You're seeing 10 of 26 rows. 16 hidden behind a free email unlock.
| # | Incident Category | Description & Examples | Reporting Threshold |
|---|---|---|---|
| 1 | Targeted scanning / probing | Scanning of critical networks and systems; reconnaissance activity against government or BFSI infrastructure | Any confirmed scan of critical infrastructure |
| 2 | Compromise of critical systems | Unauthorised access to critical information infrastructure (CII) as designated by NCIIPC | Any confirmed compromise |
| 3 | Unauthorised access to IT systems and data | Intrusion into any IT system; data exfiltration; insider threat resulting in unauthorised access | Any confirmed unauthorised access |
| 4 | Defacement of websites | Unauthorised modification of government, BFSI, or critical sector websites; intrusion with unauthorised changes | Any confirmed defacement |
| 5 | Malicious code attacks | Virus, worm, Trojan, ransomware, spyware, cryptominer infections on critical systems | Any infection of critical systems |
| 6 | Attacks on servers | Attacks on database, mail and DNS servers; brute force; exploitation of server vulnerabilities | Any attack causing service disruption |
| 7 | Identity theft / spoofing / phishing | Phishing campaigns; business email compromise; identity fraud at scale | Attacks affecting >100 users or targeting CII |
| 8 | Attacks on critical infrastructure | Attacks on power grids, banking systems, telecom, transport, healthcare IT | Any confirmed or suspected attack |
| 9 | Attacks on Internet-of-Things (IoT) | Compromise of connected devices in critical sectors; botnet activity | Any confirmed compromise of critical IoT |
| 10 | Data breaches | Exfiltration or accidental exposure of sensitive personal data, financial data, or state data | Any breach affecting >100 individuals or sensitive data |
Unlock the remaining 16 rows — free
Just your work email. Includes free India template downloads.
Consolidated from CERT-In Directions 2022 Annexure-I (compound categories split for clarity). Verify the canonical list at cert-in.org.in.