Mains Practice Questions

Introduction

Borders today are increasingly digital as much as physical. With over 800 million internet users, India’s growing digital ecosystem is both a strength and a vulnerability. Importantly, cyberspace has now emerged as the ‘fifth domain of warfare’—after land, sea, air, and space—where hostile actors can disrupt economies, target critical infrastructure, and compromise sovereignty without crossing physical borders.

India’s Vulnerabilities

• Critical Infrastructure: Increasing digitization of power, transport, and financial networks has created systemic vulnerabilities. For instance, a 2023  Department of Personnel and Training (DoPT) report highlighted a malware attack on a Ministry and a massive DDOS attack on critical infrastructure in India.
• Defense & Government Data Breaches: Cyber espionage has targeted sensitive defense research and communication. Past incidents of malware infiltration in DRDO and the 2019 Kudankulam nuclear plant cyberattack demonstrate strategic risks.
• Dependence on Foreign Technology: India relies heavily on imported semiconductors, telecom hardware, and undersea cables, exposing it to embedded malware and backdoors. Concerns around Huawei’s participation in 5G trials exemplify this dependence.
• Private Sector Weakness: Many MSMEs and even strategic firms lack robust cybersecurity. The 2021 ransomware attack on SpiceJet operations showed vulnerabilities in aviation.
  • A 2025 report based on Proofpoint's data indicates that 99% of Indian firms reported material data loss in 2024, the highest globally. 
• Finance Sector: The Economic Survey 2024-25 said banks were the most affected by cybersecurity incidents with reports indicating that almost one-fifth of all reported cyber incidents involve financial institutions.
• Human Factor: Low cyber awareness increases susceptibility to phishing and social engineering. CERT-In recorded over 14 lakh incidents in 2021, many linked to user negligence.

Integrated Cyber Defense & Digital Sovereignty Strategy

• Institutional Strengthening: Empower NCIIPC and operationalize the long-pending National Cyber Security Strategy 2020 with updated legal frameworks. CERT-In already plays a key role but requires wider reach.
• Indigenous Technological Capabilities: Promote chip manufacturing (ISM), indigenous OS (BharOS), cloud (C-DAC's Meghdoot), and 5G/6G ecosystems. The India Semiconductor Mission (2021) aims to reduce foreign dependence.
• Public-Private Partnership: Establish sector-specific CERTs, conduct mandatory audits, and foster joint R&D. Infosys and Wipro already collaborate with CERT-In on threat intelligence.
• Capacity Building: Set up dedicated cyber academies, strengthen AI-based cyber forensics, and integrate cyber literacy in education. National Forensic Science University trains cyber specialists.
• Global Cooperation: Collaborate with partners like the US, Israel, and QUAD members for intelligence sharing and norm-setting. India-US Cyber Dialogue and Indo-Israel cyber partnerships illustrate such cooperation.
• Citizen Awareness: Promote cyber hygiene campaigns for safe digital practices. RBI’s “RBI Kehta Hai” campaign raised awareness on secure transactions.

Conclusion

India’s digital sovereignty is as vital as its territorial sovereignty. A holistic strategy—rooted in indigenous technology, resilient institutions, public-private cooperation, and global partnerships—will enable India to safeguard its cyber frontiers and secure its national interests in the digital age.