Offensive And Defensive Cyber Security Capabilities Of India Must Be Established

Cyber security in India has always remained an ignored world whether it is Congress or BJP govt. Neither Congress nor BJP has the vision to ensure a safe and robust cyber security in India and till October 2022 the position of Indian cyber security is very bad.

In 2012, Visionary Praveen Dalal suggested many far reaching and reformative cyber security measures but both Congress and BJP failed to act upon them. One of the suggestions of Visionary Praveen Dalal in 2012 was that Offensive And Defensive Cyber Security Capabilities Of India must be developed as soon as possible. However, even in October 2022 that has remained a distant dream.

Even Cyber Warfare against India and its defenses have remained an illusive dream and till October 2022 India is a sitting duck in cyber security field. India has focused upon illegal and unconstitutional e-surveillance instead of strengthening of Rule of Law, Privacy, Civil Liberties in Cyberspace and cyber security. As a result, India is facing tremendous cyber attacks and cyber crimes in the year 2022.

In the year 2014, Visionary Praveen Dalal brought to the attention of Modi Govt the challenges of cyber security but it failed to act upon them even in October 2022. Now Indians are bearing the consequences of the same and cyber crimes, cyber frauds and digital payment related crimes have increased significantly in India. This all is well attitude of Indian govt is not good for the national interests of India and that is why we have ensured a robust and effective cyber crimes reporting system in India.

So bad is the situation that even cyber security breach reporting in India has failed to take off since 2014. Except chasing away cryptocurrencies and VPN service providers from India, this norm has not done anything. MSMEs and small companies in India openly declared that they would not comply with such rules and this forced the govt to further extend the deadline. So one can simply refuse to comply with cyber security related norms and Indian govt cannot do anything in this regard.

To develop robust Offensive and Defensive Cyber Security Capabilities of India, we need a 360 degree view of the cyber security landscape of India says Visionary Praveen Dalal. But what we have is lack of political will, unwillingness of stakeholders to ensure cyber security and lack of cyber law and cyber security skills in India. We at Perry4Law Organisation (P4LO) and PTLB have been working on all these aspects and techno legal online skills development from K12 to lifelong learning stages in one of our priority areas.

For instance, Streami Virtual School is the only school of the world that is teaching cyber law and cyber security to school students. Streami Virtual School is the first virtual school of India and first techno legal virtual school of the world. This is the approach that we need for India but political parties like Congress, BJP, AAP, etc are engaging in rhetoric and drama instead of actually working upon reforming education and ensuring skills development of Indians.

Till we have a capable govt and capable and skilled workforce, ensuring offensive and defensive cyber security capabilities of India is not possible. We at P4LO and PTLB have done our part and now those stakeholders who believe in same cause must do their part.

Modi Government Failed To Address Cyber Security Challenges Despite A Warning In 2014 By Visionary Praveen Dalal

This article was written by Visionary Praveen Dalal in 2014 making PM Modi aware of the dire need to ensure robust and resilient cyber law, cyber security and national security of India. But till September 2022 nothing has been done by Modi govt in this regard. This article has been reposted here with permission so that students of Streami Virtual School can understand and learn about Indian cyber law and cyber security conditions.

As Mr. Narendra Modi is all set to swear to the post of Prime Minister of India he has to face unlimited challenges that have accumulated over a period of time. Thanks to our bureaucratic set up and all pervasive corruption, public reforms have always been kept at bay. There was no dearth of money and skilled people to accomplish the projected targets but still a dominant majority of projects in the last decade have failed to materialise.

Now that Mr. Modi has asked for a brief but accurate report and analysis of the situation, our bureaucrats are sweating and are in high stress. Even if they may somehow justify their non action and national reforms massacre still they would not be in a position to accomplish the mammoth tasks that have yet to be achieved. Decades of corrupt practices, incompetencies and indifference cannot be defeated in few years especially by retaining the same bureaucratic and ministerial structure.

Although there are hundreds of issues of national importance yet I would like to confine myself to a single issue that is closely and intrinsically related to our national security. The issue that I am talking about is the cyber security of India that is in a really bad shape. For decades our bureaucrats and Indian government did not consider cyber security as an essential part of national security policy of India. As a result cyber security has been grossly neglected and this has created a situation of high alert.

Even on the legislation front, India has failed to do the needful. For instance, we need to repeal the laws like Information Technology Act, 2000 (IT Act 2000), Indian Telegraph Act, 1885, etc but for some strange reasons our bureaucrats and Indian government kept them intact. I have been suggesting this recourse for the past five years but till now nothing concrete has happened in this regard. Similarly, crucial laws are absent from Indian statute books. These include law regarding privacy, data protection, telecom security, encryption, cloud computing, etc.

Mr. Modi would be required to not only overhaul his cabinet structure but also cleanse the bureaucratic circles that have been plaguing Indian reforms. Bureaucrats and politicians with clean image, hard working reputation and reforms oriented approach must alone be part and parcel of the Prime Minister’s Office (PMO) that may emerge as a “centralised national reforms point” of India. The approach regarding the proposed PMO is much required as that may be a game changer for India.

The previous PMO of India has already sanctioned a plan to spend 1,000 crore over the next four years to strengthen the cyber security capabilities of India. All Mr. Modi has to do is to make it sure that this may not be another proposal with no actual implementation. It must also be ensured that the allocated money is not only utilised but corrupt practices must also not take place while executing the cyber security project.

Obviously India needs to establish both offensive and defensive cyber security capabilities. This is important to protect the critical infrastructures of India that are dependent upon information technology. A cyber warfare policy of India must also be formulated as Malware like Stuxnet, Duqu, Flame, Uroburos/Snake, Blackshades, FinFisher, etc are far beyond the reach of present cyber security mechanisms. These Malware are stealth in nature and till the time they are discovered the damage is already done.

Skilled workforce is also need of the hour and for this purpose cyber security courses must be introduced at the university level. Online education must be encouraged so that online cyber security courses can be imparted in India.

In short, the cyber security challenges before the Modi Government are institutional, skills driven, time sensitive and urgent in nature. We have already delayed strengthening of our cyber security capabilities and any further delay should not be tolerated by him.

Cyber Security Challenges For The Modi Government As Suggested By Visionary Praveen Dalal In 2014

In May 2014, Praveen Dalal, CEO of Perry4Law Organisation (P4LO), PTLB and PTLITC, warned about poor cyber law and cyber security conditions in India. But till September 2022 nothing has been done by Modi govt in this regard, except empty promises.

Cyber security in India is in a poor condition even in September 2022.  Cyber security of banks in India is also required to be strengthened. The banks operating in India are not at all serious about maintaining cyber security of banking related transactions and this is resulting in many cyber and financial crimes in India. In the absence of appropriate skills development and modernisation of law enforcement agencies of India, police force are finding it really difficult to solve technology related crimes. Further, cyber security of sensitive databases would also require strong privacy protection and cyber security compliance.

Another problematic area is absence of an implementable telecom security policy of India. Most of the policies and regulations in this regard are clearly unconstitutional in nature as they are neither balanced nor in compliance with the constitutional requirements. Experts believe that the stand of Modi government regarding e-surveillance projects like Central Monitoring System (CMS) Project of India and Internet Spy System Network and Traffic Analysis System (NETRA) of India must be made clear. Otherwise, this would create troubles for the government as well as for the telecom security policy in the near future.

In 2014, Visionary Praveen Dalal recommended:

“The cyber security challenges for the Modi government must be given due importance. Cyber security should be an essential component of the national security policy of India. The cyber security trends in India, as provided by Perry4Law Organisation (P4LO) from time to time, have highlighted major shortcomings of Indian cyber security initiatives and the same must be addressed by Modi government as soon as possible. Although National Cyber Security Policy (NSCP) 2013 has been declared yet it needs both updation and implementation.”

“We need dedicated cyber security laws in India and effective cyber security policies. For instance, we have no cyber warfare policy of India and this is a major lacuna in the contemporary times. Similarly, critical infrastructure protection in India is also not up to the mark and it needs to be strengthened. Let us hope that the Modi government would do needful in this regard.”

However, nothing happened since 2014 as political aspirations are more important for Modi govt than national security and national cyber security.

But we at P4LO, PTLB and PTLITC have continued to spread awareness and created dedicated techno legal online portals so that techno legal skills in fields like cyber law, cyber security, cyber forensics, etc can be developed in India. Streami Virtual School is the first virtual school of India and first techno legal virtual school of the world. It is already developing skills of cyber law and cyber security of K12 segment. PTLB and PTLITC are managing cyber law and cyber security skills development initiatives of P4LO from K12 to lifelong learning stages.

Let us hope that Modi govt would wake up now to the dangers of technology usage and do the needful as soon as possible.

All Is Well Attitude Towards Cyber Security Of India Would Be Fatal Warns Visionary Praveen Dalal

India is a sitting duck in cyber security field and there is no doubt about that. Whether it is Congress or BJP, no political party paid the required attention to cyber security of India. Even when any govt tried to do so, industry and businesses have successfully pushed back a proactive cyber security system in India.

For instance, MSMEs of India are still not ready to comply with CERT-In’s cybersecurity rules. The India SME Forum wrote a letter to the govt seeking the 25-09-2022 deadline extension. Even if Modi govt does not allow such an extension, there would not be any material difference in this regard as hardly anybody reports cyber security breaches in India in any case.

From banks to directors of Indian companies, nobody takes cyber security breach reporting seriously. Telecom companies are worst affected as they actively harbour cyber criminals and cyber fraudsters who are exploiting their infrastructure without any fear and legal liabilities.

Authorities like Delhi Police are themselves useless as they lack technical capabilities and expertise to handle technology related crimes. Govt portals are just show pieces with no actual utility. You can report something there but no actual action is ever taken by such portals and authorities handling them. RBI Ombudsman is dead and there is no accountability of Indian banks to ensure robust cyber security for banking systems.

Similarly, Indian banks cannot even keep their servers up and running and expecting them to have secure systems is naive. RBI has done just lip service in this regard and online banking and digital payments are insecure in India. Bank customers are without any remedy except the one provided by Online Dispute Resolution (ODR) Portal of Visionary Praveen Dalal. ODR Portal of India is the only portal that is providing techno legal assistance to global stakeholders.

This all is well attitude for cyber security of India has persisted for almost two decades and no political party has the wisdom to bring the required and necessary changes. We have already lost a great deal of money in India to cyber criminals but the real damage is not even reported in media.

Monetary loss is just one aspect and other more dangerous and complicated aspects would be faced by India very soon. This all is well attitude would prove fatal to India in near future warns Visionary Praveen Dalal.

But if you are a serious player and you love India and its interest, contact ODR India Portal for your complete techno legal regulatory and compliance requirements in India and other jurisdictions. We would manage your cyber security, cyber law, digital evidencing, cyber forensic and many more techno legal regulatory and compliance needs.

Perry4Law Organisation (P4LO) and PTLB are managing the exclusive techno legal Centre of Excellence for Digital India Laws and Regulations in India (CEDILRI) since 2016. It is helping ODR India Portal to manage global techno legal regulatory and legal compliance of global stakeholders. Stay on the right side of law and contact ODR India Portal today for your techno legal regulatory and compliance needs.