Ethical Hacking Training And Courses In India

The need of ethical hackers in India has emerged out of the necessity to tackle growing cases of cyber crimes and cyber attacks. For too long strategic systems and computers located at Indian government departments and sensitive faculties have been targeted by cyber criminals and enemy states. Incidences of cyber espionage against India have increased a lot.

Naturally, India needs a skilled ethical hacking workforce that can ward off such cyber threats. Cyber skills development in India has, therefore, gained importance and demand for skilled workforce in fields like cyber security, cyber forensics, cyber law, etc has increased globally.

These fields are techno legal in nature that required a thorough understanding of both technical and legal aspects at the same time. Neither technical nor legal knowledge in itself is sufficient. Techno legal e-learning courses in India need to be developed to meet the techno legal demands of India.

Ethical hacking trainings and courses in India need to be developed on techno legal lines. Similarly, ethical hacking training institutes in India must also ensure that the trainings provided by them are techno legal in nature. Further, ethical hacking training providers in India must also ensure that they provide only practical trainings and courses whose main aim should be to develop techno legal skills.

Ethical hacking skills development in India is not an easy task. The amalgamation of technology and law is not easy to teach. It is even more difficult to practically apply these techno legal principles in real life. At Perry4Law Techno Legal Base (PTLB) we understand these issues and are providing the exclusive techno legal ethical hacking trainings and courses in India. Other techno legal courses are also provided by PTLB that covers areas like cyber law, cyber forensics, cyber security, etc. PTLB is also managing the exclusive techno legal ethical hacking software and tools repository in India.

PTLB e-learning platform is providing ethical hacking training and courses in India among various other techno legal courses, trainings, educations and skills development initiatives. We hope these initiatives of PTLB would be useful for all the stakeholders.

Financial Frauds And IT Crimes In Indian Companies Is Increasing

Financial frauds and cyber crimes have plagued Indian corporate sector. IT and cyber frauds in Indian companies has increased a lot. Corporate IT frauds and cyber crime investigations in India have also increased. This has also necessitated cyber due diligence for Indian companies.

White collar crimes and financial frauds are increasing in India. By its very nature these high profile crimes affect corporate sector. Indian companies are also facing increased corporate frauds, financial frauds, white color crimes and technological frauds.

With growing dependence upon information and communication technology (ICT) for various corporate functions, corporate systems and corporate assets are exposed to diverse forms of cyber attacks. Further, data privacy laws in India, data protection laws in India, privacy laws in India, etc have further added responsibilities for corporate sector of India.

Further, companies in India are also required to follow cyber law due diligence in India and cyber security due diligence in India. However, absence of techno legal cyber skills and cyber crimes investigation trainings in India, technology related crimes and cyber crimes have increased in India. Companies in India are facing growing threats from malware attacks, phishing attacks, ATM frauds, online banking threats, trading fraud, etc.

Clearly, Indian companies are not prepared to deal with these sophisticated technology crimes and organised crimes. Recently the companies bill 2011 has been tabled in lok sabha that carries few reformatory provisions in this regard. It was planned to give more powers to serious frauds investigation office (SFIO) of India. Under the proposed companies bill 2011, SFIO has been given a statutory recognition. This is a good step as it would help in curbing corporate frauds in India.

Perry4Law and Perry4Law Techno Legal Base (PTLB) strongly recommend that it is high time for Indian companies to take care of the cyber due diligence and cyber security due diligence requirements under various laws of India. These due diligence requirements are essential part of overall audit strategy of each company. The sooner cyber law and cyber security are taken seriously by Indian companies the better it would be for the larger interest of all stakeholders.

Corporate IT Frauds And Cyber Crimes Investigation In India

Corporate frauds and crimes have taken a new shape in the present information technology age. Data theft, privacy violations, intellectual property rights (IPRs) violation, trade secrets theft, financial frauds, etc have also increased in the corporate sector of India. Even white collar crimes and organised crimes have increased a lot.

Clearly, IT and cyber frauds in Indian companies have increased a lot. These frauds have necessitated cyber due diligence for Indian companies. Further, these IT frauds and corporate cyber crimes have necessitated for their timely and proper investigation. Corporate laws of India must be suitable amended to address these issues in India.

There are multiple investigation agencies in India depending upon the nature of the wrong or crime. Corporate frauds and corporate cyber crimes can be prosecuted at the administrative level or in civil and criminal courts.

Investigation of corporate IT frauds and corporate cyber crimes is a complicated process that requires techno legal training and expertise. These offences require a good working knowledge of both technical and legal knowledge.

Cyber crime investigation methods in India are still maturing. There are very few cyber crime investigators in India that can investigate a cyber crime in techno legal manner. Cyber crime investigation training in India is urgently required so that more such investigators can be produced. With growing cases of corporate IT frauds and corporate cyber crimes, the demand for such cyber crime investigators in India is going to increase.

Perry4Law and Perry4Law Techno Legal Base (PTLB) are providing world renowned and exclusive techno legal trainings to various stakeholders. Some of the areas covered by PTLB are cyber due diligence training in India, cyber forensics trainings in India, cyber security training in India, corporate IT frauds prevention training in India, cyber crime investigation training in India, etc.

Recently, corporate frauds like Satyam fraud, Citibank fraud at Gurgaon, etc came to the light in India. More such frauds may be possible in near future. Realising the gravity of the situation, Indian government decided to further strengthen the powers of serious frauds investigation office (SFIO) of India. The proposed companies bill 2011 has also decided to grant a statutory recognition to SFIO so that corporate frauds can be effectively tackled. Further, corporate and banking laws in India are in the process of being strengthened.

This is a good decision. However, SFIO must develop techno legal expertise to effectively tackle the growing cases of corporate IT frauds and corporate cyber crimes in India. SFIO should immediately start developing techno legal capabilities so that we have a strong and effective authority that can not only deter corporate IT frauds but can also successfully prosecute and punish them. Perry4Law and PTLB would extend their techno legal expertise in this regard if requested by SFIO or any other law enforcement agency or other agency of Indian government.

Cyber Due Diligence For Indian Companies

Cyber due diligence in India has finally arrived in India. The information technology act, 2000 (IT Act 2000) is the sole cyber law of India. IT Act 2000 prescribes cyber due diligence requirements on the part of various stakeholders like banks, companies, individuals, Internet intermediaries, e-commerce sites, etc.

However, till now cyber due diligence in India has not been taken seriously. This is so because cyber law awareness is not very good among various stakeholders. Similarly, civil and criminal prosecutions for lack of cyber due diligence in India is a rare phenomenon. Since ignorance of law if no excuse, in future cases for lack of cyber due diligence would increase in India.

IT and cyber frauds in Indian companies is increasing these days. However, a majority of Indian companies are not performing cyber due diligence in India. The companies in India are required to follow cyber law due diligence in India and cyber security due diligence in India. In the absence of proper due diligence these companies may find themselves in trouble.

Social media laws in India and social networking laws in India would bring their own share of cyber due diligence. Cyber law on social media and networking sites in India is pretty stringent and employees of a company may violate the same intentionally or unintentionally. Internet intermediary law in India and cyber due diligence cannot be taken lightly in India anymore.

Another sector that is urgently demanding cyber due diligence is banking industry of India. Cyber due diligence for banks in India is long due. Banks and companies in India are facing growing threats from malware attacks, phishing attacks, ATM frauds, online banking threats, trading fraud, etc. If a bank cannot show that it performed cyber due diligence and such cyber frauds and cyber crimes occurred without its negligence, it may be required to bear the financial loss. Presently Indian banks are not complying with cyber law due diligence requirements in India.

Finally, the scope and use of e-discovery in India is also increasing. Whether it is a corporate investigation, civil suit or criminal proceedings, e-discovery is playing a decisive role world over. Further, e-discovery laws and practices in India are developing as well. Even e-discovery related litigation, LPO and KPO services in India are growing.

Perry4Law and Perry4Law Techno Legal Base (PTLB) strongly recommend that cyber due diligence training in India needs to be developed so that cyber due diligence compliances by various stakeholders is possible. This training should be a regular and integral part of the corporate strategy of each company. There is no escape from cyber due diligence in India and companies must accept this reality as soon as possible.

IT And Cyber Frauds In Indian Companies Is Increasing

White collar crimes and financial frauds are increasing in India. By its very nature these high profile crimes affect corporate sector. Indian companies are also facing increased corporate frauds, financial frauds, white color crimes and technological frauds.

With growing dependence upon information and communication technology (ICT) for various corporate functions, corporate systems and corporate assets are exposed to diverse forms of cyber attacks. Further, data privacy laws in India, data protection laws in India, privacy laws in India, etc have further added responsibilities for corporate sector of India.

Further, companies in India are also required to follow cyber law due diligence in India and cyber security due diligence in India. However, absence of techno legal cyber skills and cyber crimes investigation trainings in India, technology related crimes and cyber crimes have increased in India. Companies in India are facing growing threats from malware attacks, phishing attacks, ATM frauds, online banking threats, trading fraud, etc.

Clearly, Indian companies are not prepared to deal with these sophisticated technology crimes and organised crimes. Recently the companies bill 2011 has been tabled in lok sabha that carries few reformatory provisions in this regard. It was planned to give more powers to serious frauds investigation office (SFIO) of India. Under the proposed companies bill 2011, SFIO has been given a statutory recognition. This is a good step as it would help in curbing corporate frauds in India.

Perry4Law and Perry4Law Techno Legal Base (PTLB) strongly recommend that it is high time for Indian companies to take care of the cyber due diligence and cyber security due diligence requirements under various laws of India. These due diligence requirements are essential part of overall audit strategy of each company. The sooner cyber law and cyber security are taken seriously by Indian companies the better it would be for the larger interest of all stakeholders.

Online Dispute Resolution (ODR) In India

Information and communication technology (ICT) is considered to be a good option for resolving disputes of modern days. Concepts like online dispute resolution (ODR) and e-courts are proof of the same.

Unfortunately, neither online dispute resolution in India nor e-courts in India has been accepted and implemented. In fact, we have a single techno legal e-courts training and consultancy centre of India and a single online dispute resolution (ODR) centre in India. Further, Perry4Law Techno Legal Base (PTLB) is the sole techno legal ADR and ODR services provider in India.

The scope for online dispute resolution (ODR) services in India in general and techno legal online dispute resolution (ODR) services in India in particular is really good. However, in order to capatilise the same, an early and proper start is necessary.

Online dispute resolution (ODR) and international response is still lukewarm but at least a beginning has been made there. While international online dispute resolution regime has started exploring use of ICT for disputes resolution, online dispute resolution in Asia is still growing. Online dispute resolution in Asian countries is largely confined to a single or two countries that also to a limited extent. Clearly online dispute resolution standards of practice for India and Asia need to be developed urgently.

In fact, techno legal ODR services have become necessary due to growing use of information technology for business and commercial purposes world over. For instance, ODR and cross border e-commerce transactions are also interrelated. Similar is the case regarding dispute resolution of cross border technology transactions.

Dispute resolution in technology transactions is the upcoming trend in the field of ODR. Dispute resolution of cross border technology transactions is a complicated process if we adopt traditional litigation methods to resolve them. Dispute resolution in technology transactions and dealings requires an effective, timely and cost effective mechanism. Traditional litigation is definitely not the place to achieve these objectives.

Obviously, we need an effective alternative to traditional litigation methods to resolve cross border technology transactions and dispute resolutions. Alternative dispute resolution (ADR) mechanisms like arbitration, conciliation, mediation, etc can be used effectively to resolve these technology transactions disputes. For instance, online dispute resolution (ODR) for cross border e-commerce transactions is already been used to resolved small value disputes.

Similarly, legal issues of media and entertainment industry of India have assumed tremendous importance. Entertainment and media industry dispute resolution in India can be resolved using online dispute resolution. Dispute prevention and resolution in the film and media industry in India is presently not exploring use of online dispute resolution.

However, nothing can strengthen ODR more than international efforts and international coordination activities. International legal standards for online dispute resolution (ODR) and international harmonisation of ODR is urgently required.

United Nations can play am important role in international development and international harmonisation of ODR. United Nations and online dispute resolution are closely related in this regard. In fact, UNCITRAL, ODR and India are interconnected and we need an international harmonisation of ODR legal framework as well as suitable policies at the national level. Efforts in this direction have already been undertaken at the international level and very soon we may see some development in this regard.

Alternative dispute resolution in India is well known in India and we need to make efforts in the direction of ODR as well. While doping so we must keep in mind the requirements of privacy laws in India, dispute resolution and ODR. Online commercial arbitration in India also needs to be developed. The sooner these issues are addressed the better it would be for the growth and development of ODR in India.

Terror Funding Template Of National Investigation Agency (NIA) Of India

National investigation agency (NIA) of India is the exclusive central agency that deals with terrorism related cases in India. It has been created under the National Investigation Agency Act, 2008. It intends to strengthen Indian capabilities to fight terrorism in India.

Terrorist activities heavily depend upon financial resources. Since legal channels of transfer of money are closely guarded, terrorists use illegal means and channels to transfer money. Even fake currency is used by them to support their nefarious activities.

Recently, in case numbered RC/07/2011/NIA/DLI DLI, NIA filed a criminal case under the provisions of Indian Penal Code and Unlawful Activities (Prevention) Act, 1967 against four accused persons. NIA claimed it is a case of circulation of high quality fake Indian currency notes (FICN) by some members of the banned terrorist organisation. Hizbul Mujahideen (HM), in association with the co-accused in the case, based at Malda (W.B.), located near Indo-Bangladesh border pursuant to a criminal conspiracy to fund terrorist activities in the State of Jammu and Kashmir. Investigation will be conducted further to locate the source of FICN.

Now NIA has prepared a Terror Funding Template (TFT), which will help its officials and investigators of states' anti-terror agencies to extract information on terror funding. The Template describes core sources and methods for terror funding and it can be utilised for getting relevant information from terrorists and terror suspects during their interrogation and probe. It can also be used to keep an eye on various other activities that directly or indirectly contribute to funding terrorist organisations in India and elsewhere.

Besides usual source of terror funding through hawala, narcotics trade and printing\circulation of fake Indian currency notes, the Template has taken into account misuse of zakat - giving alms to poor and needy as prescribed by the Quran - to fund terror activities. It has been “indianised” to cover issues and areas relevant for India.

These efforts have been further strengthened by the banking reforms in India. For instance, an integrated modern banking law of India has been recently suggested that can be really helpful in this case. Similarly, Reserve Bank of India (RBI) has prescribed enhanced due diligence measures by banks of India for higher risks customers that include terrorist outfits and organisations.

However, there are some very crucial issues that are posing constitutional problems for the intelligence and security agencies of India. For instance, intelligence gathering in India is unconstitutional. Similarly, counter terrorism capabilities of India are not sufficient and Indian counter terrorism capabilities needs rejuvenation. Finally, parliamentary oversight and constitutional safeguards are missing in the functions of these agencies. Time has come to approach these issues in a holistic manner.

Indian Research And Analysis Wing (RAW) Granted E-Surveillance Powers

Indian government is in controversies these days. Controversial functions like e-surveillance in India, websites blocking in India, Internet censorship in India, etc are performed by Indian government and its agencies without any procedural and constitutional safeguards and without any constitutionally sound legal framework supporting these functions.

India does not have a constitutionally sound lawful interception law. Phone tapping in India is still done in an unconstitutional manner and at times by private individuals as well. Further surveillance of Internet traffic in India is now openly acknowledged by Indian government.

Recently Internet intermediaries in India were asked to pre screen contents before they are posted on their platforms by the account holders. Before that Yahoo took Indian government to court over e-surveillance. In its petition, Yahoo has raised questions on the right to privacy of a company that stores such sensitive data and to what extent authorities can coerce it to part with the information considered necessary to either track terror perpetrators or thwart future attacks.

The intelligence infrastructure of India has become synonymous for non accountability and mess. There is neither any parliamentary oversight nor and transparency and accountability of the working of Intelligence Agencies of India. Intelligence infrastructure of India needs rejuvenation keeping in mind the constitutional obligations. As on date, intelligence gathering in India is performed unconstitutionally.

Among all these controversial issues, now the Ministry of Home Affairs has added and notified the intelligence agency, the Research and Analysis Wing (RAW) in the list of eight agencies to intercept phone calls, e-mails and data communications. This would give RAW a cover for intercepting phone calls, e-mails and voice and data communication domestically.

RAW would not be able to deploy its communication interception equipment at international gateways to snoop on all forms of data, be it international telephony emanating from India, or any form of electronic data including e-mails. However, this notification has failed to mention how such interceptions would be in conformity with civil liberties protection in Indian cyberspace.

Intelligence Gathering In India Is Unconstitutional

Intelligence gathering and fighting terrorism are essential national security and sovereign functions. They cannot be equated at par with other governmental functions. That is the reason why every country provides some extra protection and immunity from public scrutiny to such functions.

None can doubt that Indian counter terrorism capabilities need rejuvenation. We have an obvious but unresolvable terrorism dilemma in India. With the growing use of social media by cyber criminals and terrorists, the intelligence agencies world over are engaging in open source intelligence through these social media and platforms.

However, the real problem is that in India intelligence agencies and law enforcement agencies are practically governed by no law. Whether it is Central Bureau of Investigation (CBI) or Intelligence Agencies of India, none of them are presently “accountable” to Parliament of India.

Even the constitutional validity of national investigation agency act, 2008 is still doubtful. Further, India does not have a constitutionally sound lawful interception law. Phone tapping in India is still done in an unconstitutional manner and at times by private individuals as well.

E-surveillance in India, websites blocking in India, Internet censorship in India, etc are also not done a strictly constitutional manner. Till now Indian courts have not tested the acts of intelligence agencies of India on the touchstone of constitutional protections. There is no e-surveillance policy in India and protection of human rights in Indian cyberspace has still not been considered by Indian government.

In fact, intelligence infrastructure of India has become synonymous for non accountability and mess. There is neither any parliamentary oversight nor and transparency and accountability of the working of Intelligence Agencies of India. Intelligence infrastructure of India needs rejuvenation keeping in mind the constitutional obligations.

A private Bill titled Intelligence Services (Powers and Regulation) Bill, 2011 was circulated in the last session of the Parliament. However, instead of discussing the same in the current Monsoon Session (August 2011) and winter session (December 2011) of the Parliament, Indian Prime Minister Dr. Manmohan Singh has announced that Law on Intelligence Agencies would be formulated soon.

The national intelligence grid (Natgrid) project of India is also without any constitutional safeguards. The Cabinet Committee on Security (CCS) has also given only “Partial In Principle Approval” to NATGRID Project. Since NATGRID Project is not supported by any Legal Framework and Parliamentary Oversight, the “Crucial Stages” of NATGRID Project has not yet been approved by the CCS. Thus, NATGRID Project of India is still in troubled waters as lack of Privacy Laws and Data Protection Laws has put it in doldrums.

On top of it we have the proposed central monitoring system (CMS) project of India that has been proposed without any parliamentary oversight. Further, stress upon Internet kill switch is also given by India without realising that Internet kill switch is not a solution to cyber threats. Anti Internet kill switch measures are needed to prevent Indian government from taking recourse of any such unconstitutional and draconian action.

Finally, intelligence gathering skills developments in India are far from satisfactory. Intelligence agencies of India are insisting upon use of 40 bits encryption level in India. This has been suggested so that surveillance of Internet traffic in India is possible. However, e-surveillance is not a substitute for cyber skills. Encryption policy of India is urgently needed to resolve all these issues.

Presently, Indian government and intelligence agencies of India are engaging in many unconstitutional activities that are not subject to any parliamentary or judicial scrutiny. It is high time to bring some order in the chaos created by this situation unless it is too late.

E-Delivery Of Public Services Development Policy Loan (DPL) Project Of India

Electronic delivery of services is an effective method to introduce transparency in governmental dealings and to reduce corruption therein. Similarly, e-delivery of services can also bring efficiency that can reduce costs and unnecessary time taking by government departments.

For instance, Securities and Exchange Board of India (SEBI) is planning to use electronic initial public offer (E-IPO) in India. With this investors would be able to bid for shares electronically and without the need for signing any papers physically. This could also be used as a mean to provide an exit to companies which are listed exclusively on defunct exchanges.

Similarly, Indian judiciary is exploring the possibility of using an electronic bail communication system in India. This system would ensure sending of bail order in real time so that unreasonable detention in jail can be avoided.

Further, with the passing of the proposed Cable TV Networks (Regulation) Second Amendment Bill 2011 of India, digital television services would be offered to consumers at affordable prices and with superior quality.

Even on the front of social networking, Indian government is considering enacting a framework and guidelines for use of social media for government organisations. This would ensure an interaction between government departments and general public on crucial issues and public grievances. A good social media policy of India can be really helpful in this regard.

Even private outsourcing models have been developed where citizen to government LPO and KPO services in India would be extended in future. This would be an extension of e-delivery of services from private sector to the government in India as pioneered by Perry4Law and Perry4Law Techno Legal Base (PTLB).

Recently the World Bank and Indian government signed a loan agreement of $150 million for the e-delivery of public services in India. In order to get the benefits of such loan, electronic services delivery in India has been proposed in the past. E-delivery of public services in India would still take few years as we have no legal framework for mandatory e-governance in India.

With the proposed draft Electronic Delivery of Services Bill 2011 (EDS Bill 2011) Indian government has for the first time shown its willingness to provide e-governance services in India. However, the proposed Draft Electronic Services Delivery Bill 2011 “failed” to provide mandatory e-governance services in India. The real problem with Indian e-governance initiatives in general and proposed ESD Bill 2011 in particular is that legal framework for mandatory electronic services delivery in India is still missing from it.

Legal framework for mandatory e-governance services in India is long due. Till mandatory e-governance services in India are ensured, e-delivery services in India cannot succeed.

An electronic services delivery policy of India must be formulated as soon as possible that must mandate a compulsory e-delivery of services in India. Such e-delivery of services must be provided in a time bound manner to be successful. Till now there are no hints of these pre requisites and the e-delivery of public services DPL project of India cannot succeed in these circumstances.