UPSC Previous Year Question | Mains GS3 | 2022

What are the different elements of cyber security? Keeping in view the challenges in cyber security examine the extent to which India has successfully developed a comprehensive National Cyber Security Strategy. (Answer in 250 words)

Answer

Introduction

Cybersecurity protects the confidentiality, integrity and availability of information and systems against unauthorised access, disruption, manipulation and destruction.

Elements

Core elements

  • Risk assessment, governance, security-by-design, identity and access management, encryption and secure networks.
  • Continuous monitoring, vulnerability management, backups, incident response, disaster recovery and cyber forensics.
  • User awareness, privacy protection, supply-chain security and protection of critical information infrastructure are equally important.

Challenges

India’s challenges

  • Rapid digitisation, legacy systems, ransomware, phishing, data theft, disinformation and attacks on critical infrastructure expand the threat surface.
  • Dependence on imported hardware and software, shortage of skilled professionals, fragmented reporting and weak cyber hygiene complicate response.
  • Small enterprises and citizens often lack resources, while jurisdictional and attribution problems hamper prosecution.

Assessment

National strategy assessment

  • India has built institutions such as CERT-In, the National Critical Information Infrastructure Protection Centre, sectoral CSIRTs and cybercrime reporting mechanisms. Laws, incident directions, digital public infrastructure and capacity-building programmes provide important foundations.
  • However, a fully comprehensive, publicly articulated and consistently implemented national strategy needs clearer roles, State-level capacity, data protection, mandatory resilience standards, indigenous capability, tested exercises and stronger public–private information sharing.

Keywords

CIA triad; CERT-In; NCIIPC; critical infrastructure; ransomware; cyber resilience; incident response; privacy.

Topics: critical information infrastructure, cyber security, internal security, national cyber security strategy