Cybersecurity

India has made significant strides in developing its Information and Communication Technology (ICT) infrastructure, utilizing it as a catalyst for growth, social development, and commercial activities. However, recognizing the dual-use nature of cyber technologies and the growing threats of cyber warfare, terrorism, and espionage, there is a pressing need for India to formulate a comprehensive cybersecurity policy. Drawing from its experience of cyber espionage and attacks in recent years, such a policy would serve to safeguard India's interests and strengthen its resilience against emerging cyber threats.

In today's highly connected world, approximately 3.6 billion out of the 8 billion global population are online, utilizing cyberspace as a primary communication platform. This digital realm has rapidly empowered and interconnected individuals. However, it also harbors avenues for destructive behavior, exploited by cybercriminals and state-backed actors alike. These entities leverage the digital landscape to perpetrate various forms of harm, from cybercrime to state-sponsored attacks, causing disruption and chaos on a global scale. In response, promoting digital literacy becomes imperative, fostering awareness and resilience to navigate the digital space safely and counter potential threats effectively.

According to Symantec, India ranks as the fifth most vulnerable country to cyber security breaches. Cyber Security involves safeguarding computers, networks, software, and data from unauthorised access and malicious attacks. This protection encompasses preventing both physical unauthorized access to computers and remote access through networks using malicious data and code injection. With the increasing prevalence of the Internet of Things (IoT), which includes interconnected "smart" devices like smartphones, televisions and air conditioners capable of data transmission, cybersecurity has become crucial. Attacks on these devices can result in significant financial costs.

Cyber espionage: Cyber espionage involves the unauthorized use of computer networks to access confidential information, typically held by governments or other organizations.

Cyber warfare: Cyber warfare entails the use of computer technology to disrupt the activities of a state or an organization through large-scale and systematic digital assaults. These attacks often occur between two countries.

Cyber Terrorism: Cyber terrorism refers to computer-based attacks aimed at disabling critical information infrastructure and holding governments for ransom. Targets of cyber terrorism include financial networks, traffic control systems, power plants, telecommunication networks, health facilities, and other vital infrastructure.

Cybercrime: It involves the use of cyberspace, including computers, the internet, and cell phones, to commit various types of crimes.

• Hacking: This involves unauthorized access to a computer network, software, or system.
• Phishing: It refers to the act of obtaining victims' sensitive information by posing as trusted companies and organizations
• Cyber Stalking: Cyber stalking utilizes social media or other tools to stalk and harass individuals or groups.
• Copyright Infringement: This involves violating copyrights by downloading music, movies, games, software, etc., from illicit sites or distributing content without authorization.
• Child Pornography: This crime involves soliciting minors via social media and other platforms for the purpose of child pornography.
• Malware: Malware is malicious software used to gain access to an individual's system. It can steal sensitive information, lock down computers and data, and demand ransom for their release. Types of malware include Trojans, viruses, worms, ransomware, spyware, etc.

• Protect Data: The government is aggressively implementing various digital initiatives such as Aadhaar, MyGov, Government eMarket, DigiLocker, Bharat Net, etc. These initiatives involve the handling of sensitive data, and thus, robust cybersecurity measures are essential to protect this information from unauthorized access and cyber threats.
• High Internet Usage: India is the second-largest country in terms of internet users, following China. The increasing number of internet users indicates a growing digital footprint, making cybersecurity crucial to safeguard users' data and privacy.
• Increasing Online Transactions: The government's digital push is encouraging more citizens, companies, and government agencies to transact online. With the rise in online transactions, there is a greater need for cybersecurity to protect financial transactions, personal information, and sensitive data from cyber threats.
• Cross-Border Cyber Attacks:
  • India faces potential cross-border cyber attacks, especially from countries like China and Pakistan. These attacks can have a debilitating impact on Critical Information Infrastructure, including financial systems, health facilities, nuclear plants, etc.
  • Additionally, cross-border cyber attacks can be used as spyware to gather sensitive information, posing a significant threat to national security.
• Ransomware Attacks: India has experienced several ransomware attacks, including WannaCry, Petya, and most recently Akira ransomware. These attacks have targeted various organizations and government agencies, causing disruptions and financial losses
  • Akira: CERT-In has issued a warning regarding the Akira ransomware, which is capable of infecting both Windows and Linux systems. This ransomware encrypts data on affected devices, compelling victims to pay a double ransom for decryption and recovery. The cybercriminal group responsible for Akira has already attacked numerous victims, primarily focusing on those situated in the United States.
• Cyber Insurance: Cyber insurance encompasses protection against various losses arising from cyber threats such as malware attacks, phishing, ransom demands by hackers, data recovery expenses,data theft, and business interruptions due to cyberattacks. It also addresses intangible losses including damage to reputation and adverse impacts on mental health. The surge in remote work facilitated by computers during the COVID-19 lockdown has led to increased demand for such policies.

• Application security> It involves the measures taken to keep software and devices free of threats
• Information security> It encompasses the protection of data integrity and privacy.
• Network Security> it is focused on securing a computer network from intruders
• Operational Security> It includes the processes and decisions for handling and protecting data assets.
• End-user Security>It involves educating users on actions such as deleting suspicious email attachments and refraining from plugging in unidentified USB drives.
• Disaster Recovery Planning> It defines how an organization will respond to cyber security incidents.

• Creates a secure cyber ecosystem and strengthens the regulatory framework to ensure the protection of critical information infrastructure.
• Establish National and Sectoral level 24 x 7 mechanisms to gather strategic information regarding threats to Information and Communication Technology (ICT) infrastructure.
• Develop suitable indigenous security technologies to enhance cybersecurity measures.
• Establish a National Critical Information Infrastructure Protection Centre (NCIIPC) along with 24x7 operations for the protection and resilience of Critical Information Infrastructure (CII).
• Set up infrastructure for testing and validation of the security of ICT products to ensure their reliability.
• Train 5,00,000 professionals skilled in cybersecurity within 5 years through capacity building, skill development, and training initiatives.
• Provide fiscal benefits to businesses that adopt standard security practices to incentivize cybersecurity measures.
• Ensure effective prevention and prosecution of cybercrime and enhance law enforcement capabilities through appropriate legislative interventions.
• Create a culture of cybersecurity through Information, Education, and Communication (IEC) initiatives to raise awareness and promote best practices.
• Foster effective public-private partnerships (PPP) and collaborative engagement to address cybersecurity challenges comprehensively.

• Data Colonization: The phenomenon where physical servers storing data for many service providers are located outside India, while the data itself is generated, used, and exported from India. This poses risks such as the use of data by international companies for interfering in elections, influencing outcomes, and spreading radicalism.
• Fragmented Regulatory Landscape: Numerous agencies with overlapping jurisdictions exist, without a unified framework to coordinate their efforts, leading to inefficiencies in addressing cybersecurity challenges.
• Low levels of Digital Literacy: Many Indians have limited digital literacy, making them highly vulnerable to cyber fraud and theft.
• Shortage of Trained Professionals: Despite the National Cybersecurity Policy aiming to create 500,000 cybersecurity professionals, the shortage persists, leading to a lack of adequately trained staff.
• Data Privacy: Despite the enactment of the Digital Personal Data Protection Act 2023, many entities have failed to implement robust cybersecurity systems to prevent the unauthorized leakage of personal data. For instance, the recent ban on PayTM payments bank underscores the prevailing data privacy concerns within the country.
• Inadequate Security Infrastructure: The prevalence of unlicensed software and inadequate security infrastructure in India exposes systems to malware attacks.
• Import from China: The dependence on imported electronic devices, primarily from China, poses a vulnerability to critical infrastructure.
• Lack of Awareness and Reporting: There is a general lack of awareness regarding cyber fraud, resulting in a significant number of cybercrime cases going unreported, hindering effective prevention and response efforts. Also, many businesses in India are unaware of the importance of cyber insurance.

• National Cyber Security Policy, 2013: Explained above
• National Cyber Security Strategy (being formulated): It aims to build upon the initiatives of the 2013 policy and develop a more comprehensive approach to cybersecurity. It is still in the formulation stage.
• Information Technology Act, 2000: It was enacted to provide a legal framework governing cyberspace and cybersecurity. It was amended in 2008 to address gaps in the original act.
• Information Technology (Amendment) Act, 2008:
  • It updated and redefined terms for current use, expanded the definition of cybercrime, and validated electronic signatures. It encourages companies to implement better data security practices and holds them liable for data breaches.
  • Section 69A: It is the most contentious provision in this Act. It empowers the Central and State governments to issue directions for intercepting, monitoring, or decrypting any information in computer resources, which many critics allege is being misused.
• IT Rules, 2021: It aims to regulate social media, digital news, and Over the Top (OTT) platforms. It differentiates between smaller and larger social media intermediaries based on user numbers and imposes stricter personal data protection obligations on larger intermediaries.
• Digital Personal Data Protection Act of 2023: It aims to protect data principals and restrict the activities of data fiduciaries. It establishes the Data Protection Board of India for proper implementation of the Act.
  • Justice B. N. Srikrishna Committee Report: Was setup to frame a law applicable for data protection, privacy and digital empowerment. Based on the law prescribed in it, the DPDPA 2023 was passed.
• Institutional Measures
  • Defence Cyber Agency: It is a tri-service command of the Indian armed forces tasked with coordinating and controlling joint cyber operations and crafting India’s cyber doctrine.
  • National Critical Information Infrastructure Protection Centre (NCIIPC): It was established under the IT Act, 2000, and it gathers intelligence and monitors emerging cyber threats in critical sectors like air control, nuclear, space, and national defense.
  • Indian Computer Emergency Response Team (CERT-In): It has been designated as the national nodal agency for responding to computer security incidents in India, operating 24x7 and coordinating with CERTs worldwide.
  • National Cyber Coordination Centre (NCCC): It operates under the Ministry of Home Affairs, scanning incoming internet traffic to provide real-time situational awareness and alerts to security agencies.
  • Cyber Dome: It was created by the Centre of Excellence for Kerala Police to combat emerging cyber threats. It serves as a platform where government bodies, law enforcement agencies, industry representatives, academic institutions, international organizations, and cybersecurity experts collaborate to strengthen the state's ability to counter cyber threats and protect its digital assets.
  • National Information Centre-Computer Emergency Response Team (NIC-CERT): It operates under the Ministry of Electronics, aiming to prevent and predict cyber-attacks on government utilities.
  • National Cyber Crime Reporting Portal: It allows the public to report cybercrimes.
  • Meridian Process: It aims to foster cooperation among governmental bodies globally on Critical Information Infrastructure Protection (CIIP) issues, with India as a member.
  • Convention on Cybercrime (Budapest Convention): It was initiated by the Council of Europe, being the first international treaty addressing internet and computer crime, providing guidelines for signatories to develop national legislation against cybercrime and promoting international cooperation. India has not joined this convention due to sovereignty concerns.

There is an urgent need to formulate the National Cyber Security Strategy to provide clarity and establish better coordination and cooperation among regulatory bodies. Additionally, measures need to be undertaken to mandate companies to set up their data servers within India, thereby enhancing data security and regulatory oversight. Moreover, introducing a cybersecurity super specialization course can help in preparing a skilled talent pool to address evolving cyber threats effectively. Supporting Cyber Warriors and Ethical Hackers, along with providing ethical hacking courses under the Skill India framework, will further contribute to strengthening cybersecurity capabilities. Setting up more cyber forensic labs and conducting cyber mock drills under CERT supervision are essential steps to improve incident response capabilities and enhance overall cybersecurity preparedness in the country.