The Indian Computer Emergency Response Team (CERT-In) serves as the national agency for cyber security. Any service provider, intermediaries, data centres, body corporate or person who fails to provide the information called for or comply with the relevant section shall be punishable with imprisonment for a term which may extend to one year or with fine which may extend to one lakh rupees or with both. Hence all three — service providers, data centres, and body corporate — are legally mandated to report cyber security incidents.