Section 3(3)(g) in The Information Technology (Information Security Practices and Procedures for Protected System) Rules, 2018
(g)plan, establish, implement, operate, monitor, review, and continually improve Cyber Crisis Management Plan (CCMP) in close coordination with National Critical Information Infrastructure Protection Centre;