In India, it is legally mandatory for which of the following to report on cyber security incidents? 1. Service providers 2. Data centres 3. Body corporate. Select the correct answer using the code given below:

1. Service providers — Under the CERT-In Rules, 2013, cyber security incidents must be mandatorily reported by service providers. Verdict: Correct.

2. Data centres — The same legal framework specifically includes data centres among entities required to report cyber incidents to CERT-In. Verdict: Correct.

3. Body corporate — Body corporate is also expressly covered under the reporting requirement for cyber security incidents. Verdict: Correct.

Hence, all three are legally mandated to report such incidents. Answer: (d) 1, 2 and 3.