Key Points

The Indian government has significantly ramped up its cybersecurity efforts through extensive sector-wide audits targeting critical infrastructure. CERT-In and NCIIPC have collaborated to conduct nearly 10,000 security assessments across power, banking, and energy sectors. Minister Jitin Prasada highlighted the strategic approach to creating a safer digital ecosystem for all users. These comprehensive measures demonstrate India's proactive stance in defending against evolving cyber threats.

Key Points: CERT-In Conducts 9,798 Cybersecurity Audits Across Critical Sectors

  • 9,798 security audits completed in critical infrastructure sectors
  • 200 cybersecurity organizations empaneled for audit process
  • Sector-specific CSIRTs operational in finance and power domains
  • Indigenous cyber tools developed to reduce foreign technology dependence
2 min read

Centre conducts over 9,700 cybersecurity audits of critical sectors like power, banking

India's cyber defense strengthens with comprehensive security audits in power, banking, and infrastructure sectors by CERT-In and NCIIPC

"Our policies aim to ensure a safe, trusted, and accountable cyberspace - Jitin Prasada, Minister of Electronics and IT"

New Delhi, July 27

The Indian Computer Emergency Response Team (CERT-in) and National Critical Information Infrastructure Protection Centre (NCIIPC) have together carried out 9,798 security audits to strengthen cybersecurity across critical sectors like power, energy and the banking, financial services and insurance (BFSI) in the country, according to the government.

The government remains conscious of the cyber threats to India's digital and physical infrastructure.

"The policies of government of India are aimed at ensuring a safe, trusted, and accountable cyberspace for all users. Multiple initiatives have been undertaken to secure critical infrastructure sectors such as power, transport or banking for their uninterrupted and safe functioning," said Minister of State for Electronics and IT, Jitin Prasada, in the Rajya Sabha.

CERT-in has empaneled 200 cybersecurity organisations for carrying out these audits.

The cyber agency issues the necessary guidelines for setting up of State/sectoral Computer Security Incident Response Teams (CSIRTs). Sector-specific CSIRTs, such as CSIRT in Finance sector (CSIRT-Fin) and CSIRT in Power sector (CSIRT-Power), are operational to coordinate cyber security issues and improve cyber resilience within respective sectors.

The Centre for Development of Advanced Computing (C-DAC) has developed a range of indigenous cyber security tools in mobile security, forensics, log collection and analytics, etc. to reduce reliance on foreign solutions, said the minister.

CERT-In has formulated a Cyber Crisis Management Plan (CCMP) for all government bodies to counter cyber-attacks and cyber-terrorism. CCMP provides strategic framework to coordinate recovery from cyber-crisis and enhance resilience.

In addition, guideline documents and templates have been published to assist development and implementation of state-level/sectoral Crisis Management Plans.

CERT-In also regularly conducts workshops for government bodies and key organisations to sensitise them about the cyber security threat landscape and enabling them to prepare and implement the CCMP. So far, 205 such CCMP workshops have been conducted.

- IANS

Share this article:

Reader Comments

P
Priya S
Good to see indigenous cyber security tools being developed. We shouldn't depend on foreign solutions when it comes to national security. But I hope these audits translate into actual security improvements, not just paperwork exercises.
A
Arjun K
The numbers look impressive but what about results? How many vulnerabilities were actually found and fixed? We need transparency in these audits. Also, private companies should be mandated to follow similar protocols.
S
Sarah B
As someone working in IT security, I appreciate the focus on sector-specific CSIRTs. Different industries have unique vulnerabilities. The power sector especially needs robust protection - imagine the chaos if grid systems get hacked! âš¡
V
Vikram M
While this is good, what about cybersecurity awareness for common citizens? Most hacking happens due to simple phishing attacks. Government should run mass awareness campaigns like they do for other schemes.
K
Kavya N
The Cyber Crisis Management Plan is a much-needed step. But implementation is key - hope all government departments actually follow it properly. Too often we see good policies but poor execution at ground level.

We welcome thoughtful discussions from our readers. Please keep comments respectful and on-topic.

Leave a Comment

Minimum 50 characters 0/50