Strategy 2020 • Take accountability for National Cyber Emergencies and its response and orchestrating all associated agencies during such responses • Orchestrate all efforts of Government in bilateral, multilateral, regional cyber cooperation, and participation in Global forums and influence and drive the agenda aligned to India’s interests in Cyber Space and Security. Budgetary Provisions: As cyber security is critically important to national security and the digital economy, it is recommended to have a separately carved budget head. • The union budget should have a sperate head for cybersecurity by consolidating thoroughly prepared budget by different ministries and institutions. It is recommended that minimum 0.25% of total Government of India annual budget should be invested in cyber security, which subsequently can be raised to 1% as India approaches to USD 5 Trillion economy, 20% of which would be Digital Economy • Apart from the budgetary requirements of operational expenses, new investment for security baseline improvement, investment in R&D and technology development, incentivization, enhancement in the infrastructure, and all other developmental initiatives should be factored in the exercise. • Given current state of preparedness and rapidly evolving threats, we recommend a 15-20% of overall IT/Technology spend across all ministries and agencies to be earmarked for cyber security • The budgetary allocation should be linked to outcomes, and a mechanism should be devised to measure them Research, Innovation, and Technology Development: Concerted efforts for research, innovation, development of technology, and more importantly, their commercialization would be critical for both the strategic and commercial interests of the country. • Ensuring that substantial investments in ICT, modernization, and digitization should trigger cyber security technology development work through appropriate norms and incentives • Promoting the efforts of identifying the new use cases and supporting technology development against them • Emphasizing productization and commercialization of the investment in cyber security R&D by notifying associated performance criteria, calling for industry linkages, and supporting the focused efforts and programs for it • Devising research agenda, short-term and long-term, for cyber security through a focused outcome-based programs. Supporting forecasting research to identify research priorities. A NASSCOM® Initiative