India's AI security framework: Will OpenAI, Anthropic have to comply?

India's proposed framework for auditing artificial intelligence (AI) systems seeks to bring greater accountability to AI developers and organisations deploying the technology. But questions remain over its legal enforceability, particularly when it comes to global technology companies such as OpenAI and Anthropic. The Indian Computer Emergency Response Team (CERT-In) has proposed a security audit framework that requires AI-related security incidents to be reported within six hours. It classifies AI systems as low, moderate, high or critical risk, with critical systems facing continuous monitoring and independent audits by CERT-In-empanelled organisations. The framework also prescribes safeguards for autonomous AI agents, including restrictions on the permissions they can access and a kill switch to shut them down when necessary.