UPSC Notes

Cybersecurity Framework in India

PYQs

8

Articles

1

Momentum

21

Phase IFoundation

Background

Overview

Cybersecurity is a critical aspect of national security, economic stability, and digital governance, directly impacting citizen data, critical infrastructure, and international relations in the rapidly evolving digital landscape.

India has established a multi-pronged framework to address cybersecurity threats, involving various agencies, legal provisions, and awareness initiatives to protect its digital infrastructure and citizens from cyberattacks and misuse.

Phase IIStatic core

Facts & tables

Key facts

NCSC Role

Coordinates cybersecurity efforts among different agencies under the National Security Council Secretariat.

CERT-In Mandate

Designated national agency for responding to cyber security incidents under Section 70B of the IT Act, 2000.

NCCC Function

Examines cyberspace to detect cyber security threats and shares information with stakeholders.

NCIIPC Purpose

Protects critical information infrastructure in the country under Section 70A of the IT Act, 2000.

Reference table

Static syllabus anchors

TypeReference
Conceptual areaInternal Security
Conceptual areaDigital Governance

Reference table

Institutions & roles

BodyRole
National Cyber Security Coordinator (NCSC)Coordinates
Indian Computer Emergency Response Team (CERT-In)Responds to incidents
National Cyber Coordination Centre (NCCC)Detects threats
National Critical Information Infrastructure Protection Centre (NCIIPC)Protects critical infrastructure
Ministry of Electronics and Information Technology (MeitY)Implements awareness projects
Phase IIIExam lens

Prelims angle

Overview

Prelims angle: Factual recall

Prelims angle: Multi-statement analysis

Quick revision

  • NCSC: Coordination under NSCS.
  • CERT-In: Incident response (IT Act, 2000, Sec 70B).
  • NCCC: Cyberspace threat detection.
  • NCIIPC: Critical infrastructure protection (IT Act, 2000, Sec 70A).
  • ISEA project: Awareness by MeitY.

Elimination traps

Constitutional vs statutoryDistinguish between statutory bodies like CERT-In/NCIIPC (under IT Act) and advisory/coordinating bodies like NCSC/NCCC.

Check if created by Constitution or by Parliament.

High-confidence PYQs

Topic timeline

Internal SecurityDigital Governance

Government Orders Removal of Unauthorised E-Rickshaw Battery Management Apps from App Stores to Protect Consumers

22 Jul 2026 · India's cybersecurity framework integrates NCSC for coordination, CERT-In for incident response, NCCC for threat detection, and NCIIPC for critical infrastructure protection, all underpinned by the IT Act, 2000, and complemented by awareness programs.

Read article

Related topics

Practice writing on this topic

UPSC has asked 8 linked questions on Cybersecurity Framework in India in Mains. Write an answer to one — and get it evaluated.