CERT-In Releases Hardened Security Standards for Financial Cloud Microservices
The Indian Computer Emergency Response Team (CERT-In) has issued binding cybersecurity directives for cloud-native financial platforms, central payment switches, and digital public infrastructure operators.
The updated framework mandates zero-trust network architectures, end-to-end payload encryption using post-quantum cryptographic primitives, and mandatory 6-hour incident disclosure windows for all scheduled banking entities. Multi-factor authentication must incorporate hardware security keys or biometric authorization.
Cyber auditors are conducting automated vulnerability scans across municipal and federal public cloud tenancies to enforce identity and access management (IAM) least-privilege configurations.
"Digital sovereignty demands that our critical data rails be impervious to foreign interception and resilient against advanced persistent threat actors."
Industry compliance officers welcomed the clarity, noting that standardizing security telemetry reduces third-party vendor risks in core banking and pension settlement infrastructure.