National CERT Rules 2023: Obligations for Organizations and Sectoral CERTs

What the Rules Address

• Roles of National CERT and sectoral CERTs
• Expectations for organisational readiness and cooperation during incidents
• Coordination pathways for information sharing and response

Obligations Themes for Organisations

Organisations should maintain identifiable points of contact, participate in information-sharing as required, and be able to escalate significant events through the appropriate CERT channel. Exact duties depend on entity type and sector — map them in your IR plan rather than relying on marketing summaries.

Sectoral CERTs

Finance, telecom, power, and government often maintain sectoral CERT relationships. Keep those playbooks current alongside National CERT engagement and PISF evidence.

CERT Rules vs PISF 2026 Reporting

PISF 2026 materials emphasise CII immediate notification with a detailed report within 72 hours, and 120 hours for non-CII public sector. CERT Rules 2023 may add process obligations; verify the instrument text rather than assuming a conflicting “1-hour PISF rule” from secondary summaries.

How CyberSilo Helps

• Control evidence mapping in CSA for PISF 2026
• Detection and case workflows with ThreatHawk SIEM
• Advisory scoping — contact CyberSilo

Frequently Asked Questions

Are CERT Rules 2023 the same as PISF 2026?

No. CERT Rules 2023 are a separate instrument focused on CERT structure and obligations. PISF 2026 is the broader information security framework.

Which reporting clocks should we implement first?

For dedicated incident-reporting programmes under PISF themes, plan for CII immediate notify plus detailed report within 72 hours, and 120 hours for non-CII public sector — then confirm any additional CERT Rules or sectoral requirements with counsel.

Do we need a sectoral CERT relationship?

If you operate in a regulated sector with an active sectoral CERT, maintain that channel in parallel with National CERT coordination.

Related Resources

PKCERT · PISF guide · CSA