GS3 › Internal Security in Depth

Revision note: Cyber Security: Threats, Institutions and Policy


  • 95 crore+ internet users; UPI/DPI make cyber a national security domain; AIIMS ransomware Nov 2022; grid APT (RedEcho) 2020–21
  • IT Act 2000/2008: 43 civil, 66 hacking, 66F cyber terrorism (life), 69/69A interception/blocking, 70 protected systems, 70A NCIIPC, 70B CERT-In, 79 safe harbour; 66A struck down (Shreya Singhal 2015)
  • IT Rules 2021; CERT-In directions 2022 (6-hour reporting, 180-day logs); DPDP Act 2023 (Rules 2025); Telecom Act 2023
  • CERT-In (MeitY), NCIIPC (NTRO), NCSC (NSCS), I4C (MHA 2018; 1930, cybercrime.gov.in), Defence Cyber Agency 2019, Sanchar Saathi
  • NCSP 2013 (5 lakh professionals); new strategy pending; India not in Budapest Convention; UN Cybercrime Convention Dec 2024
Revision card summarising Cyber Security: Threats, Institutions and Policy
One-page visual summary of the key points to revise.

← Read the full lesson