Cyber policy to factor in threat from state actors

THE POLICY PAPER SUGGESTS MAKING MANDATORY ANY BUSINESS OR GOVT DEPARTMENT WITH A SIGNIFICANT IT INTERFACE TO SET UP A CYBER SAFETY CELL

NEW DELHI: Cyber operations by state actors and the abuse of social media for “narrative warfare” are some of the particular threats likely to be recognised by the government in the National Cyber Security Strategy, 2021 (NCSS 2021), a policy paper that could also make it mandatory for any business or government department with a significant IT interface to set up a cyber safety cell.

These will be part of a longawaited overhaul in how India sees and approaches dangers in the digital domain. India’s current posture stems from the National Cyber Security Policy of 2013, which officials and experts say has become outdated in the face of a threat landscape that affects national security, governance and critical infrastructure, communications, and business more deeply than ever.

“It is an all-encompassing document,” said a key official who worked on the paper, asking not to be named. “It addresses all our shortcomings, how to look at infrastructure development and updates the last policy which was relevant at that point of time.’’

The 50-odd pages document, anchored by the national security adviser’s office, is now awaiting the approval from the Prime Minister’s office before it is released. Hindustan Times has spoken to several key officials who worked on the paper and shared contours of what the strategy will include.

Over the last couple of years, India has faced several high-profile cyber attacks, including those purportedly originating in North Korea that targeted the Kudankulam Nuclear Power Plant and the Indian Space Research Organisation (Isro) in 2019. Earlier this week, security consultants reported finding a