What are the different elements of cyber security? Keeping in view the challenges in cyber security, examine the extent to which…

Cyber security encompasses the protection of cyberspace, digital assets, and interconnected networks from unauthorized access, disruption, or destruction. Its core elements comprise network security (securing infrastructure against intrusions), application security (vulnerability testing and secure coding), information security (protecting data integrity and confidentiality), operational security (access control and data-handling protocols), disaster recovery and business continuity (resilience and rapid restoration post-incident), and end-user education (mitigating human-factor risks like phishing).

Assessment of India’s Cyber Security Strategy

India transitioned from the foundational National Cyber Security Policy (NCSP) 2013 toward the comprehensive National Cyber Security Strategy (NCSS), accompanied by substantial institutional capacity building:

• Institutional Framework: Operationalisation of CERT-In as the national nodal incident response agency, NCIIPC for protecting Critical Information Infrastructure (under Section 70A of the IT Act), and Cyber Swachhta Kendra for malware analysis and botnet disinfection. CERT-In's 2022 directions mandate reporting of incidents within six hours, and the Digital Personal Data Protection Act, 2023 (Rules notified in 2025) adds data-security duties.
• Capacity Initiatives: Programs like Cyber Surakshit Bharat, the Indian Cyber Crime Coordination Centre (I4C), and the Defence Cyber Agency reflect a proactive shift under Digital India.

Key Challenges and Strategic Deficits

Despite these foundations, India’s strategic posture faces critical gaps:

• Policy and Structural Delays: The formal notification and implementation of the updated NCSS remain pending, causing fragmented inter-agency coordination between MeitY, MHA, and the National Security Council Secretariat (NSCS).
• Critical Infrastructure & Threat Vector: High-profile ransomware attacks on critical systems (such as AIIMS, New Delhi), unresolved supply-chain hardware vulnerabilities, and complexities around data localization reveal systemic operational exposure.
• Ecosystem Gaps: Inadequate domestic R&D for indigenous cybersecurity hardware, low cyber insurance penetration among MSMEs, and an acute deficit of certified cybersecurity professionals weaken overall cyber resilience.

Verdict

India has successfully built foundational operational nodes, yet without a notified NCSS its security apparatus remains largely reactive, so the strategy is only partly comprehensive.