Considering the threats cyberspace poses for the country, India needs a “Digital Armed Force” to prevent crimes. Critically evaluate the National Cyber Security Policy, 2013 outlining the challenges perceived in its effective implementation.

Cyberspace threats and the policy response

As critical infrastructure, finance and governance migrate online, India faces espionage, ransomware, critical-infrastructure attacks and information warfare. The demand for a 'Digital Armed Force' reflects the need for offensive-defensive cyber capability. The National Cyber Security Policy, 2013 was India's first attempt at a structured response.

What the policy sought

• Build a secure and resilient cyber ecosystem and a 24x7 mechanism for threat response.
• Protect critical information infrastructure through a nodal agency (NCIIPC).
• Strengthen CERT-In, promote indigenous security technology and create a large trained cyber workforce.
• Encourage public-private partnership and testing/certification.

Critical evaluation and challenges

• Vision without execution: the policy set goals but lacked timelines, funding and enforceable accountability.
• Skill gap: the target of half a million professionals remained largely unmet.
• Institutional overlap and no clear command for offensive capability.
• Legal gaps: weak data-protection law then, jurisdictional and attribution difficulties, and rapid technological change outpacing a static policy.
• Private-sector reluctance to share breach information.

India needs an updated, adequately funded strategy with clear command structures, mandatory breach reporting, robust data protection and continuous skilling to convert intent into genuine cyber deterrence.