BRIEF OF NCIIPC SCHEME FOR PENTESTING OF CII

1. NCIIPC aims to inculcate the culture of continuously carrying out

testing of the security posture of Critical Information Infrastructure (CII)
through engagement of top quality pen testers, cyber security researchers
and ethical hackers.
2. Towards this end NCIIPC is in the process of enrolling top quality Indian
Pen Testers and Cyber Security Researchers, Ethical Hackers and the like who
are willing to participate in a 10 – 20 day exercise of testing the security of CII
systems in a controlled environment as an individual or as a team.
3. Rewards up to Rs. 10 lakh and Commendation Certificates will be given
based on the severity/ impact of the vulnerabilities found out by participants
during the exercise. Expenses towards travelling, boarding and lodging (if
required) during the exercise would be borne by NCIIPC.
4. Top performers may be further empaneled by NCIIPC for specific cyber
security assignments.
5. If you are interested in participating as an Individual, fill Form-1 and
email it to cii.forms@nciipc.gov.in
6. If you are interested in participating as a team (max 15 members), team
leader should fill Page 1-4 of Form-2 mentioning team name and his details
whereas each team member should fill Page 5-8 of Form-2. The consolidated
set of forms should be forwarded as a single pdf to cii.forms@nciipc.gov.in
by the team leader.
7. Column 17 of the form asks for preferred months and number of days.
In this column please indicate when can you participate in the pen testing
exercises. You will be given call for those exercises which happen during that
time (if found otherwise suitable for the scheme).
8. Please ensure that the duly filled soft copy of the form along with
scanned copy of ink signed form reaches us as early as possible but not later
than 15 days of receipt of this email.