The Indian Computer Emergency Response Team (CERT-In)
CERT-In & Cybersecurity Governance
ЁЯУМ Full Name: Indian Computer Emergency Response Team
ЁЯУМ Established: 2004, under the Ministry of Electronics & IT (MeitY)
ЁЯУМ Legal Basis: Section 70B of the IT Act, 2000 (Amended in 2008)
ЁЯФ╣ Key Functions
ЁЯЫб️ Cyber Incident Response – Detects & mitigates cyber threats
ЁЯУЬ Security Advisories – Issue guidelines on vulnerabilities
ЁЯФН Threat Intelligence – Monitors cyber risks & issues alerts
ЁЯОУ Capacity Building – Conducts cybersecurity training
ЁЯМН International Collaboration – Works with global agencies
CERT-In (Indian Computer Emergency Response Team) initially focused on government agencies when it was established in 2004. Its primary role was to secure the government's digital infrastructure, including ministries, departments, and public sector enterprises.
CERT-In’s Initial Focus Areas
Government Cybersecurity Guidelines
Issued security protocols for ministries, secretariats, and public sector enterprises.
Recommended Chief Information Security Officers (CISOs) for government entities.
Critical Infrastructure Protection
Focused on securing government networks, defense systems, and financial institutions.
Developed cyber crisis management plans for government and critical sectors.
Security Audits & Incident Response
Expansion Beyond Government Agencies
Over time, CERT-In expanded its role to private sector entities, financial institutions, and citizens.
It now collaborates with internet service providers, social media platforms, and private companies to enhance cybersecurity.
CERT-In mandates cybersecurity incident reporting for both government and private agencies.
The Indian Computer Emergency Response Team (CERT-In) plays a crucial role in cybersecurity governance, making it highly relevant for UPSC aspirants, especially in areas like internal security, digital infrastructure, and cyber laws.
UPSC Relevance of CERT-In
Cybersecurity & National Security
CERT-In is India’s nodal agency for handling cyber threats, hacking, phishing, and malware attacks.
It protects critical infrastructure like banking, power grids, and defense systems.
Legal Framework & Governance
Established under Section 70B of the IT Act, 2000 (Amended in 2008).
Works under the Ministry of Electronics & IT (MeitY), ensuring cyber resilience.
Cyber Incident Response & Public Awareness
Issues security advisories, vulnerability notes, and guidelines.
Empanelled auditors conduct security assessments for government and private entities.
International Collaborations & Digital Diplomacy
Cyber Threats in Karnataka & Bengaluru
Hoax Bomb Threat Emails (Bengaluru Schools, 2024)
Nearly 70 schools in Bengaluru received bomb threat emails, causing panic.
Similar threats were sent to schools in Malaysia, Jamaica, and Germany, showing global cybercrime patterns.
Karnataka Cyber Threat Report 2025
Karnataka recorded 11.46 million malware detections, with 1.78 million ransomware attacks.
Bengaluru had 4x higher malware detection rates than the state average.
Government portals, hospitals, and educational institutions were prime targets.
Online Fraud Syndicate (Bengaluru, 2024)
A cybercrime gang duped 265 victims, stealing ₹158.94 crore.
They lured people into fake investment schemes, promising high returns.
The gang operated across 28 states, using 30 bank accounts for fraud.
UPSC Exam Sections Where CERT-In & Cyber Threats Are Relevant
GS Paper III: Covers cybersecurity, digital infrastructure, and internal security.
GS Paper II: Discusses government policies, IT laws, and international cyber cooperation.
Essay & Ethics Paper: Cyber ethics, digital privacy, and governance challenges.
Comments