Section 3(1)(b) in The Information Technology (Information Security Practices and Procedures for Protected System) Rules, 2018
(b)The composition of Information Security Steering Committee(ISSC) shall be as under:(i)IT Head or equivalent;(ii)Chief Information Security Officer (CISO);(iii)Financial Advisor or equivalent;(iv)Representative of National Critical Information Infrastructure Protection Centre (NCIIPC);(v)Any other expert(s) to be nominated by the organisation.