National Cyber Security Policy 2013 - Revision history

Ajay Kumar: Updated the article +/-

2023-09-25T18:51:40Z

Updated the article +/-

imported>Omnilegent at 09:36, 16 June 2021

2021-06-16T09:36:48Z

New page

{{Use dmy dates|date=November 2018}}
{{Use Indian English|date=November 2018}}

'''National Cyber Security Policy''' is a policy framework by [[Department of Electronics and Information Technology]] (DeitY)<ref name="http://meity.gov.in/content/national-cyber-security-policy-2013-1">{{cite news|url= http://meity.gov.in/content/national-cyber-security-policy-2013-1|title= National Cyber Security Policy-2013 |work= Department Of Electronics & Information Technology, Government Of India|date=1 July 2013|access-date= 21 November 2014}}</ref> It aims at protecting the public and private infrastructure from cyber attacks.<ref name="cyber" /> The policy also intends to safeguard "information, such as personal information (of web users), financial and banking information and sovereign data". This was particularly relevant in the wake of [[US National Security Agency]] (NSA) leaks that suggested the US government agencies are spying on Indian users, who have no legal or technical safeguards against it. [[Ministry of Communications and Information Technology (India)]] defines [[Cyberspace]] as a complex environment consisting of interactions between people, software services supported by worldwide distribution of information and communication technology.<ref name="cyber">{{cite web|title=Amid spying saga, India unveils cyber security policy|url=http://articles.timesofindia.indiatimes.com/2013-07-03/security/40350252_1_national-cyber-security-policy-cyber-crime-cyber-attacks|archive-url=https://web.archive.org/web/20130707045617/http://articles.timesofindia.indiatimes.com/2013-07-03/security/40350252_1_national-cyber-security-policy-cyber-crime-cyber-attacks|url-status=dead|archive-date=7 July 2013|location=INDIA|date=3 July 2013|work=[[The Times of India]]|access-date=24 September 2013}}</ref><ref>{{cite web| title = National Cyber Security Policy 2013: An Assessment |publisher= [[Institute for Defence Studies and Analyses]] | url=http://www.idsa.in/idsacomments/NationalCyberSecurityPolicy2013_stomar_260813|date= 26 August 2013|access-date = 2013-09-24}}</ref><ref>
{{cite web| title = For a unified cyber and telecom security policy|publisher=The Economic Times| url = http://economictimes.indiatimes.com/opinion/comments-analysis/for-a-unified-cyber-and-telecom-security-policy/articleshow/22958814.cms
|date=24 Sep 2013| access-date = 2013-09-24}}</ref>

==Reason for Cyber Security==
[[India]] had no [[Cyber security]] policy before 2013. In 2013, ''[[The Hindu]]'' newspaper, citing documents leaked by [[National Security Agency|NSA]] [[whistleblower|whistle-blower]] [[Edward Snowden]], has alleged that much of the NSA surveillance was focused on India's domestic politics and its strategic and commercial interests.<ref>{{Cite news|url=https://www.thehindu.com/opinion/editorial/protect-dont-snoop/article4895582.ece|title=Protect, don’t snoop|last=Editorial|date=9 July 2013|work=The Hindu|access-date=2019-01-02|language=en-IN|issn=0971-751X}}</ref> This sparked a furore among people. Under pressure, the government unveiled a National Cyber Security Policy 2013 on 2 July 2013.

===Vision===
To build a secure and resilient cyberspace for citizens, business, and government and also to protect anyone from intervening in user's privacy.

===Mission===

To protect information and information infrastructure in cyberspace, build capabilities to prevent and respond to cyber threat, reduce vulnerabilities and minimize damage from cyber incidents through a combination of institutional structures, people, processes, technology, and cooperation.

===Objective===

[[Ministry of Communications and Information Technology (India)]] define objectives as follows:

*To create a secure cyber ecosystem in the country, generate adequate trust and confidence in IT system and transactions in cyberspace and thereby enhance adoption of IT in all sectors of the economy.
*To create an assurance framework for the design of security policies and promotion and enabling actions for compliance to global security standards and best practices by way of conformity assessment (Product, process, technology & people).
*To strengthen the Regulatory Framework for ensuring a SECURE CYBERSPACE ECOSYSTEM.
*To enhance and create National and Sectoral level 24x7 mechanism for obtaining strategic information regarding threats to ICT infrastructure, creating scenarios for response, resolution and crisis management through effective predictive, preventive, protective response and recovery actions.
-To improve visibility of integrity of ICT products and services by establishing infrastructure for testing & validation of security of such product.
*To create workforce for 500,000 professionals skilled in next 5 years through capacity building skill development and training.
*To provide fiscal benefit to businesses for adoption of standard security practices and processes.
*To enable Protection of information while in process, handling, storage & transit so as to safeguard privacy of citizen's data and reducing economic losses due to cyber crime or data theft.
*To enable effective prevention, investigation and prosecution of cybercrime and enhancement of law enforcement capabilities through appropriate legislative intervention.

===Strategies===
* Creating a secured Ecosystem.
* Creating an assurance framework.
* Encouraging Open Standards.
* Strengthening The regulatory Framework.
* Creating mechanism for Security Threats Early Warning, Vulnerability management and response to security threat.
* Securing E-Governance services.
* Protection and resilience of Critical Information Infrastructure.
* Promotion of Research and Development in cyber security.
* Reducing supply chain risks
* Human Resource Development (fostering education and training programs both in formal and informal sectors to support Nation's cyber security needs and build capacity.
* Creating cyber security awareness.
* Developing effective Public Private Partnership.
* To develop bilateral and multilateral relationship in the area of cyber security with other country. ('''Information sharing and cooperation''')
* Prioritized approach for implementation.

== See also ==

* [[National Security Strategy (India)]]

==References==
{{reflist}}

==External links==
* {{cite web|title=National Cyber Security Policy 2013| url = http://meity.gov.in/sites/upload_files/dit/files/National%20Cyber%20Security%20Policy%20(1).pdf|publisher=Department of Information Technology, Ministry of Communications and Information Technology}}
* [http://www.civils.shiksha/indian-cyber-security/ Indian Cyber Security]

[[Category:Proposed laws of India]]
[[Category:2013 in India]]
[[Category:Ministry of Communications and Information Technology (India)]]
[[Category:Computer security]]
[[Category:Internet in India]]
[[Category:Cyber Security in India]]

← Older revision		Revision as of 00:21, 26 September 2023
Line 6:		Line 6:
	\|date=24 Sep 2013\| access-date = 2013-09-24}}</ref>		\|date=24 Sep 2013\| access-date = 2013-09-24}}</ref>

	==Reason for Cyber Security==		==Reason for Cyber Security policies==
	[[India]] had no [[Cyber security]] policy before 2013. In 2013, ''[[The Hindu]]'' newspaper, citing documents leaked by [[National Security Agency\|NSA]] [[whistleblower\|whistle-blower]] [[Edward Snowden]], has alleged that much of the NSA surveillance was focused on India's domestic politics and its strategic and commercial interests.<ref>{{Cite news\|url=https://www.thehindu.com/opinion/editorial/protect-dont-snoop/article4895582.ece\|title=Protect, ~~don’t~~ snoop\|last=Editorial\|date=9 July 2013\|work=The Hindu\|access-date=2019-01-02\|language=en-IN\|issn=0971-751X}}</ref> This sparked a furore among people. Under pressure, the government unveiled a National Cyber Security Policy 2013 on 2 July 2013.		[[India]] had no [[Cyber security]] policy before 2013. In 2013, ''[[The Hindu]]'' newspaper, citing documents leaked by [[National Security Agency\|NSA]] [[whistleblower\|whistle-blower]] [[Edward Snowden]], has alleged that much of the NSA surveillance was focused on India's domestic politics and its strategic and commercial interests.<ref>{{Cite news\|url=https://www.thehindu.com/opinion/editorial/protect-dont-snoop/article4895582.ece\|title=Protect, don't snoop\|last=Editorial\|date=9 July 2013\|work=The Hindu\|access-date=2019-01-02\|language=en-IN\|issn=0971-751X}}</ref> This sparked a furore among people. Under pressure, the government unveiled a National Cyber Security Policy 2013 on 2 July 2013.

	===Vision===		== Vision ==
	To build a secure and resilient cyberspace for citizens, business, and government and also to protect anyone from intervening in user's privacy.		To build a secure and resilient cyberspace for citizens, business, and government and also to protect anyone from intervening in user's privacy.It mentioned a five year target of training five lakh cyber security personnel by 2018.

	===Mission===		== Mission ==

	To protect information and information infrastructure in cyberspace, build capabilities to prevent and respond to cyber threat, reduce vulnerabilities and minimize damage from cyber incidents through a combination of institutional structures, people, processes, technology, and cooperation.		To protect information and information infrastructure in cyberspace, build capabilities to prevent and respond to cyber threat, reduce vulnerabilities and minimize damage from cyber incidents through a combination of institutional structures, people, processes, technology, and cooperation.

	===Objective===		== Objective ==

	[[Ministry of Communications and Information Technology (India)]] define objectives as follows:		[[Ministry of Communications and Information Technology (India)]] define objectives as follows:

	*To create a secure cyber ecosystem in the country, generate adequate trust and confidence in IT system and transactions in cyberspace and thereby enhance adoption of IT in all sectors of the economy.		*To create a secure cyber ecosystem in the country, generate adequate trust and confidence in IT system and transactions in cyberspace and thereby enhance adoption of IT in all sectors of the economy.
	*To create an assurance framework for the design of security policies and promotion and enabling actions for compliance to global security standards and best practices by way of conformity assessment (Product, process, technology & people).		*To create an assurance framework for the design of security policies and promotion and enabling actions for compliance to global security standards and best practices by way of conformity assessment (Product, process, technology & people).
	*To strengthen the Regulatory Framework for ensuring a SECURE CYBERSPACE ECOSYSTEM.		*To strengthen the Regulatory Framework for ensuring a SECURE CYBERSPACE ECOSYSTEM.
	*To enhance and create National and Sectoral level 24x7 mechanism for obtaining strategic information regarding threats to ICT infrastructure, creating scenarios for response, resolution and crisis management through effective predictive, preventive, protective response and recovery actions.		*To enhance and create National and Sectoral level 24x7 mechanism for obtaining strategic information regarding threats to ICT infrastructure, creating scenarios for response, resolution and crisis management through effective predictive, preventive, protective response and recovery actions.
Line 30:		Line 30:
	*To enable effective prevention, investigation and prosecution of cybercrime and enhancement of law enforcement capabilities through appropriate legislative intervention.		*To enable effective prevention, investigation and prosecution of cybercrime and enhancement of law enforcement capabilities through appropriate legislative intervention.

	===Strategies===		== Strategies ==
	* Creating a secured Ecosystem.		* Creating a secured Ecosystem.
	* Creating an assurance framework.		* Creating an assurance framework.
	* Encouraging Open Standards.		* Encouraging Open Standards.
	* Strengthening The regulatory Framework.		* Strengthening The regulatory Framework.
	* Creating mechanism for Security Threats Early Warning, Vulnerability management and response to security ~~threat~~.		* Creating a mechanism for Security Threats Early Warning, Vulnerability management, and response to security threats.
	* Securing E-Governance services.		* Securing E-Governance services.
	* Protection and resilience of Critical Information Infrastructure.		* Protection and resilience of Critical Information Infrastructure.
	* Promotion of Research and Development in cyber security.		* Promotion of Research and Development in cyber security.
	* Reducing supply chain risks		* Reducing supply chain risks
	* Human Resource Development (fostering education and training programs both in formal and informal sectors to ~~support~~ Nation's cyber security needs and build capacity.		* Human Resource Development (fostering education and training programs both in formal and informal sectors to Support the Nation's cyber security needs and build capacity.
	* Creating cyber security awareness.		* Creating cyber security awareness.
	* Developing effective Public Private ~~Partnership~~.		* Developing effective Public-Private partnerships.
	* To develop bilateral and multilateral ~~relationship~~ in the area of cyber security with ~~other~~ country. ('''Information sharing and cooperation''')		* To develop bilateral and multilateral relationships in the area of cyber security with another country. ('''Information sharing and cooperation''')
	* Prioritized approach for implementation.		* a Prioritized approach for implementation.

	== See also ==		== See also ==