File No: 2(35)/2011-CERT-In
Ministry of Communication and Information Technology
Department of Electronics and Information Technology
country.
Such a focus enables creation of a suitable cyber security eco-system in the country, in
tune with globally networked environment.
5. Cyberspace
manmade
is vulnerable
or natural,
to a wide
variety
and the data exchanged
of incidents,
whether
in the cyberspace
can
intentional
or accidental,
be exploited for nefarious
purposes by both nation- states and non-state actors. Cyber attacks that target the infrastructure or
underlying economic well-being of a nation state can effectively reduce available state resources
and undermine confidence in their supporting structures.
A cyber related incident of national
significance
may
take
any
form;
an
organized
cyber
attack,
an uncontrolled exploit such as
or any malicious software code, a national disaster with significant cyber
or other related incidents capable of causing extensive damage to the information
computer virus or worms
consequences
infrastructure or key assets. Large-scale cyber incidents may overwhelm the government, public
and private sector resources and services by disrupting functioning of critical information systems.
Complications from disruptions of such a magnitude may threaten lives, economy and national
security.
Rapid
remediation
examples
can
identification,
mitigate
the
information exchange,
damage
caused
by
investigation and coordinated response
malicious
of cyber threats to individuals, businesses
cyberspace
activity.
Some
and
of the
and government are identity theft, phishing,
social engineering, hactivism, cyber terrorism, compound threats targeting mobile devices and smart
phone, compromised digital certificates, advanced persistent threats, denial of service, bot nets,
supply chain attacks, data leakage, etc. The protection of information infrastructure and preservation
of the confidentiality, integrity and availability of information in cyberspace is the essence of a secure
cyber space.
6. There
are various
ongoing
security challenges which
activities and
programs
of the Government
to address the cyber
have significantly contributed to the creation of a platform that is now
capable of supporting and sustaining the efforts in securing the cyber space. Due to the dynamic
nature of cyberspace, there is now a need for these actions to be unified under a National Cyber
Security Policy, with an integrated vision and a set of sustained & coordinated strategies for
implementation.
7. The cyber security policy is an evolving task and it caters to the whole spectrum of ICT users and
providers including home users and small, medium and large enterprises and Government & nonGovernment entities. It serves as an umbrella framework for defining and guiding the actions related
to security of cyberspace. It also enables the individual sectors and organizations in designing
appropriate cyber security policies to suit their needs. The policy provides an overview of what it
takes to effectively protect information, information systems & networks and also gives an insight
into the Government's approach and strategy for protection of cyber space in the country. It also
Page 2 of 10