officials did state that they would be conducting a review of the directions imposed 90 days after they have been implemented to address the challenges industries are facing with the roll out of the same the directions were rolled out on 28th june however a threemonth relaxation has been provided to all vpnvps cloud service providers and msmes so that they can build their capabilities to adhere to the certin directives in motion for them the new timeline is now 25th september 2022 this came after a submission was made by rootconf on behalf of smes highlighting the lack of time to build the capacity they require to adhere to the new directives certins cybersecurity directives are perceived as convolutional as some concerns have been raised by the industry in terms of timeline and feasibility on one hand certin is trying to take stringent steps in controlling cyber incidents in the country but on the other hand the directives are putting a lot of enterprises in a difficult position vpn providers are concerned since storing customer logs goes against the core ethics of the entire institution additionally they do not have storage systems in place that can gather and store this amount of data micro small and medium enterprises msmes would have to heavily invest in amalgamating both ot and it security at their end they need to look at consolidation of elements within their security posture and increase investments in incidental management and threat intelligence systems along with automated solutions all enterprises must adapt security controls that are focused on managing microservices apis and seamless application delivery across crossplatforms in an interconnected ecosystem and look beyond northsouth security they should deploy solutions that are agile and can predict and provide anomaly and threat detection both within and outside the perimeter of software architecture the rules issued by certin not only mandates the reporting of cyber incidents in india but also provokes businesses to revamp and rethink their entire it and network security landscape will certins new directions be an aid to seamless business operations in india or a roadblock it is yet to be determined sakshi grover research manager idc india