Keeping in view India’s internal security, analyse the impact of cross-border cyber attacks. Also discuss defensive measures against these sophisticated attacks.
Approach · directive: “analyse / discuss”
What it asks · Analyse how cross-border cyber attacks threaten internal security (infrastructure, espionage, crime and terror, information) and discuss the defensive measures available.
It asks 2 things — answer each
- Analyse the impact of cross-border cyber attacks on India's internal security: infrastructure, espionage, crime and terror, information, attribution
- Discuss defensive measures against these attacks: institutions, law, the 2022 CERT-In directions and the way forward
Open with · In 2019 malware was found in the Kudankulam plant's administrative network, isolated from control systems according to NPCIL; as grids, payments and governance go digital, such cross-border attacks make cyberspace an internal-security front.
Cover
- Critical infrastructure: power, nuclear, ports, banks and telecom can be halted remotely; Kudankulam 2019 malware in the administrative network.
- Espionage against defence and strategic sectors; ransomware, fraud and crypto channels fund crime and terror; disinformation stokes unrest.
- Attribution gap: proxies and foreign servers leave evidence and jurisdiction abroad, weakening deterrence.
- Institutions: CERT-In (IT Act), NCIIPC (2014), Defence Cyber Agency (2018), I4C (January 2020).
- Law: IT Act section 66F on cyber terrorism, security audits, trusted-source telecom rules, app blocking, data protection; CERT-In directions of 28 April 2022 require incident reporting within 6 hours.
- Way forward: sectoral CERTs, skilled workforce, indigenous hardware and software, drills, partnerships on norms and evidence.
Close with · Resilience, not prevention alone, is the goal: assume breaches, detect within hours as the 2022 directions demand, recover fast and deter with partners.
Add value (verified)
- CERT-In is the national agency designated under the Information Technology Act for collecting and analysing cyber-incident information and issuing alerts and emergency measures.RFC 2350 description of CERT-In, Indian Computer Emergency Response Team (Section 3.5: Functions and activities) ↗“The Information Technology Act 2000, designated CERT-In to serve as the national agency to perform the following functions in the area of cyber security: Collection, analysis and dissemination of information on cyber incidents. Forecast and alerts of cyber security incidents.”
- CERT-In's directions of 28 April 2022 make service providers, intermediaries, data centres, companies and government bodies report cyber incidents within 6 hours.CERT-In Directions under section 70B(6) of the IT Act, 2000, 28 April 2022 ↗“service provider, intermediary, data centre, body corporate and Government organisation shall mandatorily report cyber incidents as mentioned in Annexure I to CERT-In within 6 hours of noticing such incidents or being brought to notice about such incidents.”
- CERT-In's site describes the 2022 directions as issued under section 70B(6) of the IT Act on security practices, prevention, response and reporting of cyber incidents.CERT-In: Directions by CERT-In under section 70B of the IT Act, 2000 ↗“under sub-section (6) of section 70B of the Information Technology Act, 2000 relating to information security practices, procedure, prevention, response and reporting of cyber incidents for Safe & Trusted Internet (dated 28.04.2022)”
Question: UPSC's CS (Main) 2021, GS Paper III — paper ↗. Approach: Minimalist IAS, checked 3 Oct 2026 (how we verify) — UPSC publishes no model answers. ·
Model answer· 223words · Minimalist IAS
In 2019 malware was found in the Kudankulam plant's administrative network, isolated from control systems according to NPCIL. As grids, payments and governance go digital, such cross-border attacks make cyberspace an internal-security front.
Impact on India's internal security
- Critical infrastructure: power, nuclear, ports, banks and telecom can be halted from abroad, deniably.
- Espionage: state-linked groups target defence and strategic sectors, eroding military and diplomatic advantage.
- Crime and terror finance: ransomware, fraud and crypto channels fund crime and terror.
- Information war: disinformation and radicalisation on social media aim to trigger unrest.
- Attribution gap: proxies and foreign servers put evidence and jurisdiction abroad, weakening deterrence.
Defensive measures against sophisticated attacks
| Layer | Institution | Role |
|---|---|---|
| Response | CERT-In (IT Act) | National incident agency |
| Protection | NCIIPC (2014) | Critical information infrastructure |
| Crime | I4C (2020) | Cybercrime coordination |
- Military networks: the Defence Cyber Agency (2018).
- Law: IT Act section 66F on cyber terrorism, security audits, trusted-source rules for telecom, app blocking, data protection.
- CERT-In Directions (28 April 2022): under section 70B(6) of the IT Act, providers, intermediaries, data centres and government bodies must report incidents 'within 6 hours'.
Way forward
- Resilience by design: sectoral CERTs, skilled workforce, indigenous hardware and software, drills, partnerships on cyber norms and evidence sharing.
Resilience, not prevention alone, is the goal: assume breaches, detect within hours as the 2022 directions demand, recover fast and deter with partners.
Prepared by Minimalist IAS to the answer standard of Shivam Singh (mentor, 7 years) · facts checked against official sources (how we verify) · updated 3 Oct 2026. UPSC publishes no model answers: compare your structure and coverage with this, then write your own.
