Context: According to Nasscom-McKinsey Perspective 2025, Cybersecurity has been identified as a major growth vertical, along with Cloud and Big Data.
Key Points

• The post-Covid world is completely different in many aspects. One major change is that it has become increasingly digitised. This also has led to increasing cyber threats, with the demand for cybersecurity software products, services and professionals at an all-time high.
• India, considered the technology back-office of the world, also does not want to miss out on the opportunity to position itself as a hub for this emerging opportunity.

Current Statistic

Need For Cyber Security Framework

• National Security Imperative: The change in military doctrines favouring the need to raise cyber commands reflects a shift in strategies, which include building deterrence in cyberspace.
• The need for a competent cyber security infrastructure as part of national security was first emphasized by the Kargil Review Committee 1999.
• Increasing Importance of Digital Economy: The digital economy today comprises 14-15% of India’s total economy, and is targeted to reach 20% by 2024.
• Added Complexity: With more inclusion of artificial intelligence (AI), machine learning (ML), data analytics, cloud computing and Internet of Things (IoT), cyberspace will become a complex domain, giving rise to issues of a techno-legal nature.
• Securing Data: Data is referred to as the currency of the 21st century and due to its bulk creation owing to India’s population, several international companies (Google, Amazon etc.) are trying to have access to it.
• Given this there are issues related to data sovereignty, data localisation, internet governance, etc.
• Thus, there is a need to build strong cyber security architecture.

Challenges in India's Cyber Security Approach

• Lack of Cybersecurity WorkForce: The Indian military, central police organizations, law enforcement agencies and others are deficient in manpower, for software and hardware aspects integral to this field.
• Moreover, there is a growing demand for professionals in Artificial Intelligence (AI), BlockChain Technology (BCT), Internet of Things (IoT) and Machine Learning (ML).
• According to several estimates there is a need for at least three million cybersecurity professionals today.
• Lack of Active Cyber Defence: India doesn’t have the ‘active cyber defence’ like the EU's General Data Protection Regulation (GDPR) or US’ Clarifying Lawful Overseas Use of Data (CLOUD) Act.
• Overlapping Regulatory Bodies: Unlike the US, Singapore, and the UK where there is a single umbrella organisation dealing in cybersecurity, India has several central bodies that deal with cyber issues, and each has a different reporting structure.
• Further, each state government has its own Cyber emergency Response Team (CERT).

Dependency on Foreign Players For Cyber Security Tools: India lacks indigenisation in hardware as well as software cybersecurity tools.

• This makes India’s cyberspace vulnerable to cyberattacks motivated by state and non-state actors.

External Challenges: Challenges such as growing Chinese influence in Indian telecom space, social media is becoming a powerful tool for dissemination of “information” making it difficult to differentiate fact from fake news.

Road Ahead

• Creating Awareness: With countries resorting to digital warfare and hackers targeting business organisations and government processes, India has to create awareness that not a single person or institution is immune to it.
• While the government and the corporate world are better placed perhaps to create their own programs, it is the civil society who needs to bring into this ambit.
• Strengthening of Existing Cyber Security Framework: National cybersecurity projects such as the National Cyber Coordination Centre (NCCC), National Critical Information Infrastructure Protection Centre (NCIIPC) and the Computer Emergency Response Team (CERT) need to be strengthened manifold and reviewed.
• Bringing Cyber Security in Education: Educational institutions including central universities, private universities, industry associations, Industrial Training Institutes (ITIs) must incorporate courses on cybersecurity.
• Integrated Approach: Given increasing dominance of mobile and telecommunication, both National cyber security policy and National Telecom Policy will have to effectively coalesce to make a comprehensive policy for 2030.

Promoting Indigenisation: There is a need to create opportunities for developing software to safeguard cyber security and digital communications.

• The Government of India may consider including cybersecurity architecture in its Make In India programme.
• Also, there is a need to create suitable hardware on a unique Indian pattern that can serve localised needs.
• Given the future of technology under Industrial Revolution 4.0, India requires a strong cybersecurity framework based on the 4D principles i.e. Deter, Detect, Destroy and Document so that it can subverse all attempts towards any cyber challenges.