Latest / Government and geopolitics

PolicyGovernmentMediaIndiaConfirmed

CERT-In issues AI security auditing guidelines v1.0 with nine audit domains

See how this story connects

CERT-In’s Sub-group 03 of the Working Group on Indian Standards for Cybersecurity Auditing published version 1.0 of the AI Security Auditing Guidelines, dated 4 November 2026. The framework sorts AI systems into four risk tiers (Low, Moderate, High and Critical) and sets nine audit domains, including AI governance, model risk management and third-party and AI supply-chain assurance. For agentic AI, it requires documented identities, least privilege, human approval gates for consequential actions and a logged execution chain, and it lists excessive permissions and approval-gate bypass among the tests to run.

Why it matters

Organisations that build, buy or run AI systems in India, or process Indian data with them, are asked to tier each system by risk and audit it against nine domains.

When
4 Nov 2026
ID
WTA-N-2026-0720
Where
India
Who
CERT-In

Summary written with AI by wheresthe.ai, from CERT-In and the reporting credited above. Checked against the source on 5 Nov 2026.

Source copy: saved on 5 Nov 2026 to check this story and not republished, because the text belongs to its publisher. Document the source offers: the source PDF. Also held by the Internet Archive.

Next stop on this Storyline: What happened nextIndia’s CERT-In names Crafty Falcon group using AI tools against financial firms

Cite this story

WTA-N-2026-0720: “CERT-In issues AI security auditing guidelines v1.0 with nine audit domains.” wheresthe.ai, 4 Nov 2026. https://wheresthe.ai/d/in-cert-in-issues-ai-security-auditing-guidelines-v1-0-with-2026-11/ (source: CERT-In).

Spotted an error? Email [email protected].