Section 4(4)(a) in The Information Technology (Information Security Practices and Procedures for Protected System) Rules, 2018
(a)The Chief Information Security Officer (CISO) shall establish a process in consultation with National Critical Information Infrastructure Protection Centre (NCIIPC), for timely communication of cyber incident(s) on "Protected System" to the said National Critical Information Infrastructure Protection Centre (NCIIPC).