GS Paper 3 10 marks · 150w 9 min Medium
Discuss the potential threats of Cyber attack and the security framework to prevent it.
Subtopic: Science & Technology · Cyber security and threats
How to structure your answer
Introduction: rising cyber threat with digitalisation → potential threats → India's security framework → gaps and way forward → Conclusion
Written within the word limit
142 words · target 150 words · 9 min
As India digitalises through Digital India, UPI and critical infrastructure networks, cyberattacks have grown into a serious threat to security, economy and privacy.
Potential threats
- Attacks on critical infrastructure: power grids, banking, telecom and health systems (e.g. ransomware on hospitals).
- Financial and data crimes: phishing, data breaches, identity theft and financial fraud.
- State-sponsored and espionage attacks targeting defence and government networks.
- Malware, ransomware and DDoS, plus emerging AI-enabled and deepfake threats.
Security framework to prevent it
- Institutions: CERT-In for incident response, NCIIPC for critical information infrastructure, and the National Cyber Coordination Centre.
- Policy and law: National Cyber Security Policy 2013, the IT Act 2000 provisions and the DPDP Act 2023 for data protection.
- Capacity: Cyber Swachhta Kendra, Defence Cyber Agency and public-private cooperation.
Way forward
Updating the cyber security strategy, building skilled manpower, promoting cyber hygiene, and strengthening international cooperation are essential to secure India's digital ecosystem.
What an examiner expects to see
- Digitalisation via Digital India and UPI widens the cyberattack surface
- Threats to critical infrastructure: power, banking, telecom, health systems
- Financial fraud, phishing, data breaches and identity theft
- State-sponsored espionage targeting defence and government networks
- Ransomware, DDoS and emerging AI/deepfake threats
- CERT-In, NCIIPC and NCCC form the institutional response framework
- National Cyber Security Policy 2013, IT Act 2000 and DPDP Act 2023
- Cyber hygiene, skilled manpower and international cooperation are key remedies
Concrete cases, schemes and judgments
- CERT-In (Computer Emergency Response Team) for incident response
- National Critical Information Infrastructure Protection Centre (NCIIPC)
- AIIMS Delhi ransomware attack disrupting hospital systems (2022)
- Digital Personal Data Protection Act, 2023
- Defence Cyber Agency and Cyber Swachhta Kendra
Terminology to weave into the answer
cyber securitycritical information infrastructureCERT-InransomwareNational Cyber Security Policydata protection