Section 3(1) in The Information Technology (Information Security Practices and Procedures for Protected System) Rules, 2018
(1)(a)The organisation having "Protected System" shall constitute an Information Security Steering Committee under the chairmanship of Chief Executive Officer/Managing Director/Secretary of the organisation.(b)The composition of Information Security Steering Committee(ISSC) shall be as under:(i)IT Head or equivalent;(ii)Chief Information Security Officer (CISO);(iii)Financial Advisor or equivalent;(iv)Representative of National Critical Information Infrastructure Protection Centre (NCIIPC);(v)Any other expert(s) to be nominated by the organisation.
