CERT-In Framework for Space Cyber Security | 27 Feb 2026

The Indian Computer Emergency Response Team (CERT-In), in collaboration with SatCom Industry Association (SIA-India), has released a comprehensive advisory framework for Space Cyber Security to protect India's space assets from evolving cyber threats.

The framework aims to foster a culture of resilience, accountability, and proactive risk management, promoting "secure-by-design" architectures in India's expanding space ecosystem.
The guidelines are advisory in nature and apply to all stakeholders, including government agencies, satellite service providers, ground station operators, vendors, and private space enterprises.

Key Provisions of the Framework

Threat Assessment: Identifies specific risks to space systems, such as signal jamming, spoofing, unauthorized command uplink, ground station compromise, and firmware manipulation.
Segment-wise Security Controls: Mandates security measures across the space segment, ground infrastructure, communication links, and user terminals, covering authentication, encryption, access control, and intrusion detection.
Incident Response: Outlines mandates for incident detection, response, and reporting in alignment with CERT-In Directions.
Governance: Emphasizes the appointment of a Chief Information Security Officer (CISO) within organizations operating SatCom systems.
Supply Chain Security: Includes provisions for risk assessment, supply chain security, and equipment certification.
Alignment with Global Standards: The framework aligns with international cybersecurity frameworks, including those from the International Telecommunication Union (ITU), Consultative Committee for Space Data Systems (CCSDS), National Institute of Standards and Technology (NIST), SPACE-Shield, TREKS (Targeting, Reconnaissance, & Exploitation Kill Chain for Space) and SPARTA (Space Attack Research and Tactic Analysis).

Designated under Section 70B of the Information Technology Act, 2000, CERT-In is India's national agency for responding to cyber threats like hacking and phishing.
Operating under the Ministry of Electronics and Information Technology since 2004, it runs a 24×7 help desk to handle cyber incidents and provides prevention and security management services.