Section 3(9) in The Information Technology (Intermediaries Guidelines) Rules, 2011
(9)The intermediary shall report cyber security incidents and also share cyber security incidents related information with the Indian Computer Emergency Response Team.
