India Sets a Four-Tier AI Security Audit Regime
India’s CERT-In published a 107-page AI security audit framework on 4 November that sorts systems into low, medium, high and critical tiers, requiring independent audit by empanelled auditors and continuous monitoring for the top two. It covers Indian developers and deployers as well as foreign providers serving Indian users, with 180-day log retention and six-hour incident reporting. For any AI or marketing platform sold into India, this is an audit obligation rather than a penalty regime, and the extraterritorial scope is the part to read twice.
