India's Cybersecurity Strengthening Initiatives

Exam-Focused Notes on Cybersecurity in India through CERT-In

1. Introduction to CERT-In:

• The Indian Computer Emergency Response Team (CERT-In) functions under the Ministry of Electronics and Information Technology (MeitY).
• Established under the Information Technology Act, 2000, it addresses national cybersecurity.

2. Cybersecurity Landscape in India:

• Rapid digital transformation in governance, commerce, and services marks a shift towards a heavier reliance on digital technologies.
• Increased incidents of cyber threats: online fraud, phishing, ransomware, and AI-based scams.

3. Policy Frameworks and NIS:

• The Indian government has implemented robust policies for creating a safe, reliable, and secure cyberspace.
• Institutional frameworks include the establishment of CERT-In as a response agency for cyber incidents.

4. Economic Data:

• By 2025, India is expected to have over 1 billion internet connections, up from 251.5 million in March 2014.
• Average monthly data consumption for wireless customers increased approximately 399 times, from 61.66 MB in 2014 to 24.01 GB in 2025.
• Unified Payments Interface (UPI) recorded transactions exceeding ₹27 lakh crore in December 2025.

5. Budget Allocation:

• The central budget for 2025-26 allotted ₹782 crore for bolstering cybersecurity infrastructure, illustrating the government's commitment to securing digital assets.

6. Key Achievements by CERT-In (2025):

• Managed over 2.94 million cyber incidents.
• Issued 1,530 alerts, 390 vulnerability notes, and 65 advisories, showcasing its capability in national cyber response.
• Engaged 231 certified organizations for security assessments, strengthening cybersecurity across various sectors.

7. Capacity Building Initiatives:

• Conducted 32 specialized technical training programs and 95 cyber awareness sessions for over 20,799 officials and professionals.
• Organized 122 cybersecurity drills involving approximately 1,570 organizations from various sectors.

8. Cybersecurity Frameworks:

• CERT-In operates a Security Assurance Framework, implementing regular evaluations, vulnerability assessments, and penetration testing to enhance cybersecurity preparedness.
• Commands a Cyber Crisis Management Plan (CCMP) for systematic guidance during large-scale cyberattacks.

9. Technological Collaboration & International Recognitions:

• Collaborated globally, contributing to publications alongside WEG and Oxford University regarding cyber resilience.
• Signed the "Building Trust in AI through a Cyber-Risk-Based Approach" report with France’s National Cybersecurity Agency.

10. Cyber Security Measures and Tools:

• Cyber Cleanliness Center (CSC) established for monitoring and rectification of malware infections across connected devices.
• Provision of free tools for citizens to protect their devices, targeting 98% of the digital populace by December 2025.

11. Institutional Coordination:

• National Cyber Coordination Centre (NCCC) monitors cyberspace for real-time threat detection, promoting proactive responses among organizations and stakeholders.

12. Conclusion:

• CERT-In’s endeavors highlight India's focus on a comprehensive and forward-looking cybersecurity strategy, involving national and international stakeholders, aimed at ensuring a secure digital environment for all citizens.

This summary encompasses critical aspects of CERT-In's functions, achievements, and the evolving cybersecurity framework in India, ensuring preparedness against technological challenges ahead.