Mblaze
FULL MEMBER
- Joined
- Feb 7, 2012
- Messages
- 115
- Reaction score
- 0
India's Cyber security command and-control centres
NEW DELHI: In the face of incessant attacks on its crucial networks, the government is finalizing an elaborate plan to upgrade India's cyber security capabilities.
By stepping up protection levels, putting in place real time commandand-control centres and delineating responsibilities among various agencies, the government hopes to take on the onslaught of international cyber attacks on its critical infrastructure.
Among the proposals are dedicated command-and-control centres to monitor critical infrastructure real time, and Computer Emergency Response Teams for key sectors such as power, and elaborate protocols for all involved.
Senior sources told TOI that the Cabinet Committee on Security "should approve in a few weeks" the multi-layered security plans to protect India's critical infrastructure. "The NSA ( national security advisor) and the cabinet secretary are working on the final plan," sources said.
On top of this plan is a clear delineation of responsibilities between CERT-IN (Computer Emergency Response Team-India), NTRO ( National Technical Research Organisation), Intelligence Bureau, Military Intelligence and other agencies that have a role in fighting cyber intrusions.
Even where there are overlaps, protocol will be laid out. The proposed protocol will also cover department of telecom , department of information technology, National Informatics Centre etc.
Under the proposal, the government will also regularly and proactively monitor and scan critical networks. Not just that, the levels of security for these networks will also be stepped up, sources said. Among the key recommendations to be approved will be the creation of a National Critical Information Infrastructure Protection Centre (NCIPC). It will be a sort of commandand-control centre for monitoring a significant portion of India's critical infrastructure.
NCIPC will be manned by technical experts, but will also have officials from various organizations for quick response to any intrusions. "It will provide real time response to any breach," a senior official said.
Sources said CERT-IN was also creating its own real time monitoring centre to measure up to the new demands for cyber security. The responsibility for monitoring critical infrastructure will be divided between NCIPC and CERT-IN , sources said.
The government will also set up dedicated CERT for critical sectors such as power, aviation etc where no such national monitoring mechanism exists, sources said.
The entire move comes in the wake of a series of sensational cyber attacks on India's critical infrastructure, especially targeted at key ministries and departments. What is more worrying is the targeted cyber attacks on computers and networks of agencies such as Indo-Tibetan Border Police, a sign that China was carrying out targeted attacks.
However, sources said the attacks were not just limited to those from China. "There are instances where the end user is not clear, but definitely not China," a source said.Government finalizing plan to upgrade cyber security capabilities - Economic Times
