Section 3(2)(d) in The Information Technology (Information Security Practices and Procedures for Protected System) Rules, 2018
(d)A mechanism shall be established for timely communication of cyber incident(s) related to "Protected System" to Information Security Steering Committee.