25/06/2020 - Internal Security | Mainstorming

Ananta Kumar Muduli 4 years

Sir good evening

Pls review

IAS Parliament 4 years

Try to make a reference of cyber security policy 2013 in few lines and include about global cyber security index then link them to the need for updated cyber security strategy. Keep Writing.

Kaushal Meena 4 years

Please review my answer. Thanks

Sanjeev Kumar Singh 4 years

Good attempt brother, I think little need about 2013 policy and include India performance in global cyber security index.

Kaushal Meena 4 years

Thanks mate, really appreciate it. Will work on the given feedback.

IAS Parliament 4 years

Try to make a reference of cyber security policy 2013 in few lines and include about global cyber security index then link them to the need for updated cyber security strategy. Keep Writing.

IAS Parliament 4 years

KEY POINTS

· Financial services, payments, health services, etc are all connected to digital mediums; and thanks to Corona, this is expected to increase. In India, too, attacks have been happening with increasing frequency.

· In 2016, banks had reportedly announced a leak of personal information of 3.2 million debit cards. In 2018, Pune-based Cosmos Bank lost Rs 94 crore in a malware attack. Last year, the Kudankulam plant was attacked using malware. And, CERT-IN has recently issued an advisory that there is a threat of a massive phishing attack.

· Although India was one of the few countries to launch a cybersecurity policy in 2013, not much has transpired in terms of a coordinated cyber approach.

· India is ranked 23rd on the index with a score of 0.683 and has been listed in the "maturing" category, which refers to 77 countries that have developed complex commitments to cybersecurity and engage in cybersecurity programmes and initiatives.

· Unlike the US, Singapore, and the UK where there is a single umbrella organisation dealing in cybersecurity, India has 36 different central bodies—most ministries have their own—that deal with cyber issues, and each has a different reporting structure; each state government has its own CERT.

· Add to this the fact that while the National Cyber Security Strategy 2020 was to devise a cyber-readiness roadmap for organisations and the government for cyber-readiness, this is yet to be announced.

· While CERT-IN has responded to cyber threats, it has been late in conducting security checks, and often has released advisories once an attack has taken place. In the case of WhatsApp and Pegasus, CERT-IN only came in after others had warned of the possibility of individuals being compromised.

· With countries resorting to digital warfare and hackers targeting business organisations and government processes, India needs comprehensive cybersecurity guidelines and standards for checking cyber vulnerabilities and cyber responses.

· In many cases, as it happens, the government itself uses legacy systems which are vulnerable to cyberattacks; countries like China and Singapore, in the meanwhile, have progressed towards creating cyber defence networks. India cannot afford to be complicit about cybersecurity.