Section 3(2)(e) in The Information Technology (Information Security Practices and Procedures for Protected System) Rules, 2018
(e)A mechanism shall be established to share the results of all information security audits and compliance of "Protected System" to Information Security Steering Committee.