Section 3(8) in The Information Technology (Intermediaries Guidelines) Rules, 2011
(8)The intermediary shall take all reasonable measures to secure its computer resource and information contained therein following the reasonable security practices and procedures as prescribed in the Information Technology (Reasonable security practices and procedures and sensitive personal information) Rules, 2011.
