New Delhi: The Indian Computer Emergency Response Team (CERT-In), under the Ministry of Electronics and Information Technology (MeitY), has been recently notified as India’s first Cyber Forensic Laboratory authorized to function as an ‘Examiner of Electronic Evidence’.
This recognition comes under Section 79A of the Information Technology (IT) Act, 2000 (Amendment 2008), marking a pivotal step in strengthening the country’s cyber forensic capabilities.
This notification establishes CERT-In as an authority to examine and provide expert opinions on electronic evidence, which is critical in addressing legal disputes, criminal investigations, and digital fraud cases.
Scope of Forensic Expertise
Cyber Forensic Lab is now authorized to handle a wide range of electronic evidence, covering several key domains:
- Computer (Media) Forensics: Analysis of data stored in computers and storage media.
- Drone Storage Media Forensics: Extraction and analysis of data stored in drone devices.
- Mobile Devices Forensics: Recovery and assessment of evidence from smartphones and related devices.
- CCTV Forensics: Examination of video footage from surveillance systems.
- Cloud Forensics: Investigating data stored and transmitted in cloud-based environments.
- Media Recovery: Retrieval of deleted or corrupted data from storage devices.
By integrating cutting-edge forensic tools and methodologies, CERT-In will be equipped to support both law enforcement agencies and judicial systems in handling complex cases involving digital evidence.
Section 79A of the IT Act
Section 79A of the IT Act states: “The Central Government may, for the purposes of providing expert opinion on electronic form evidence before any court or other authority specify, by notification in the Official Gazette, any Department, body or agency of the Central Government or a State Government as an Examiner of Electronic Evidence.”
“Explanation.–For the purposes of this section, “electronic form evidence” means any information of probative value that is either stored or transmitted in electronic form and includes computer evidence, digital audio, digital video, cell phones, digital fax machines,” it added.
Significance of CERT-In’s New Role
The recognition of CERT-In under Section 79A underscores its critical role in enhancing India’s ability to address the rising challenges of cybercrime and the growing dependency on digital systems. The move is expected to:
- Strengthen the credibility of electronic evidence in courts, ensuring legal admissibility.
- Improve the prosecution of cybercrimes, such as data breaches, financial fraud, and hacking incidents.
- Boost the confidence of law enforcement agencies and other stakeholders in resolving cases involving digital evidence.
With the rapid adoption of technology and the increasing complexity of cyber incidents, having a robust forensic capability is indispensable. CERT-In’s expertise in handling computer forensics, mobile forensics, and cloud forensics will ensure swift and precise analysis of evidence, which is vital for upholding justice.
This development aligns with the Indian government’s broader goal of building a resilient cybersecurity ecosystem. By empowering CERT-In to act as an Examiner of Electronic Evidence, India takes a significant step towards creating a more robust infrastructure to combat cyber threats and secure digital transactions.
As cybercrime evolves, the need for reliable forensic analysis grows increasingly urgent. CERT-In’s expanded mandate as an Examiner of Electronic Evidence is not just a milestone for digital forensics in India but also a critical pillar in ensuring the rule of law in the digital age.
