The National Critical Information Infrastructure Protection Centre (NCIIPC) is India's national nodal agency for protecting Critical Information Infrastructure (CII). It was established under Section 70A of the Information Technology Act, 2000 and functions under the National Technical Research Organisation (NTRO).
What NCIIPC protects
Critical Information Infrastructure means computer resources whose incapacitation or destruction would have a debilitating impact on national security, the economy, public health or safety. Systems notified as 'Protected Systems' under Section 70 of the IT Act fall under NCIIPC oversight.
Sectors covered
- Power and energy
- Banking, financial services and insurance (BFSI)
- Telecommunications
- Transport
- Government
- Strategic and public enterprises
What NCIIPC does
- Issues the Guidelines for Protection of National Critical Information Infrastructure and sector advisories.
- Identifies and notifies Protected Systems and CII.
- Coordinates threat intelligence and incident response for CII.
- Prescribes audits and security practices for designated entities.
Frequently asked questions
Free compliance toolkits
Checklists, evidence registers and policy templates our auditors actually use on engagements.
Enter your work email and we’ll unlock the Excel + PDF instantly.
Need help with NCIIPC?
CERT-In empanelled, PCI QSA senior auditors can take you from reading about it to compliant — with a scoped, guided programme.