To push cyber infra, Govt may push use of made in India products
- India is poised to recommend the use of domestically developed cybersecurity products and services, particularly for critical sectors such as banking, telecom, and energy.
- The initiative is driven by the need to enhance national security in the face of escalating cybersecurity threats.
The National Cybersecurity Reference Framework (NCRF)
- The government has formulated the NCRF, a comprehensive policy to establish a clear framework for cybersecurity, outlining roles and responsibilities.
- The NCRF draws upon existing legislations, policies, and guidelines to provide an implementable measure.
- It has been developed by the National Critical Information Infrastructure Protection Centre (NCIIPC) with support from the National Cybersecurity Coordinator (NCSC).
- NCIIPC reports to the Prime Minister’s Office.
- However, the NCRF is a guideline i.e. its recommendations will not be binding.
- It was shared privately with companies and other government departments for consultation last year, but is yet to be made public.
Cybersecurity Budget Allocation
- The NCRF may recommend that enterprises allocate at least 10% of their total IT budget specifically for cybersecurity.
- This allocation should be separate from general IT resources, aligning with global best practices and aiming to enhance organizational cybersecurity posture.
Regulatory Oversight
- The NCRF could also suggest that regulators overseeing critical sectors define information security requirements.
- Additionally, these regulators may need effective Information Security Management Systems (ISMS) instances to access sensitive data related to critical sector operations.
- It may prescribe that national nodal agencies develop platforms and processes for machine-processing of data from different entities.
- This approach aims to facilitate sectoral and cross-sectoral analysis of audit compliance, audit effectiveness, and grading of auditors.
Rising Cybersecurity Incidents
- Recent high-profile cyber attacks, including the 2022 breach of AIIMS Delhi systems, have underscored the urgency for a robust cybersecurity framework.
- The lack of an overarching framework has prompted concerns among union ministers, emphasizing the need for sector-specific legislations.
Prelims Takeaway
- National Cybersecurity Reference Framework (NCRF)
- Indian Computer Emergency Response Team