India is one of the most cyber-attacked nations. In the last decade or so, cyber security has gained prominence and become a part of India’s national security policy and framework. Cyber security affects us not just at a macro level but also permeates lives at an individual level. The recent developments in technology, the structures and processes that have evolved over a period of time and the current political regime play a part in defining and refining the cyber security regime in the country.
Addressing the facets of cybersecurity and the evolution of India’s cyberspace framework G. Narendranath, Joint Secretary, National Security Council Secretariat, spoke about the fundamental principles guiding the movement forward. Setting measurable outcomes bound within five-year time frames and assigning institutional responsibility of the policy objectives to be achieved formed the starting blocks for policy making.
Technology brings challenges and opportunities
Narendranath emphasised on the importance of understanding the evolution of technology to appreciate the issues and risks posed to national, enterprise and individual cyber security.
Modern technological advancements like Artificial Intelligence, Blockchain, IoT, 5g bring their own set of challenges in terms of security. These challenges are nestled with opportunities that can't be ignored too. Explaining the preposition with an example, Nath says that while using artificial intelligence is paramount to ensure cyber security, however, AI might become a double edged sword in the sense that it can be used to design attacks on the systems one wants to protect. Likewise there are challenges in operating with 5G services and security issues while working from work from environments.
There is no one size fits for all when building a robust and secure infrastructure
Building a dynamic infrastructure is critical in view of the threats security breaches may bring. However, one needs to understand that not every organisation or sector shows the same level of maturity in addressing the issue. Nath gives examples of certain sectors to drive home the point. While the banking and telecom sector has shown proactiveness in creating a robust cyber infrastructure, the approach of enterprises in the power sector has not been consistent in the recent past. Understanding the level of sectoral maturity forms a crucial cog in the wheel when it comes to understanding the risks and challenges cyber security brings and the ways and means to develop a sound response or protection mechanism.
While delving on the solutions, Nath lays stress on the quality of the equipment in creating a safe and secure infrastructure
There are two dimensions to the whole story. One dimension is about the quality of the product per se, just because the product comes from a source on which we have confidence that he would not indulge in any malicious activity, let's say as an Indian source on which we have a lot of confidence that you will not indulge in a malicious activity does not ensure that it's secure, he says.
A trusted product will be one where the components would come from a trusted source, says Mr Narendranath. Ensuring that the software synced with the hardware does not get infected with malicious elements and adherence to standards to ensure cyber security.
Chief Information Security Officer is a very important window in the organisation
During his keynote address at the Aerospace & Defence Conclave 2021, Narendranath touched upon the need of capacity building in the cybersecurity space. He spoke about the importance of a cyber security officer when it comes to implementing the measures within the organisation. In his experience, CISO is an additional role that is given to a person who has another functional role.
Narendranath further spoke about the elements of the national cybersecurity strategy and India’s vision to relentlessly work on creating a safe and secure national infrastructure in the cyberspace domain.