Section 70A(2) in The Information Technology Act, 2000
(2)The national nodal agency designated under sub-section (1) shall be responsible for all measures including Research and Development relating to protection of Critical Information Infrastructure.