Section 8(2) in The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
(2)The international Standard IS/ISO/IEC 27001 on "Information Technology-Security Techniques - Information Security Management System - Requirements" is one such standard referred to in sub-rule (1).
