What does cyber security cover?

Protecting computer systems, networks, and data from unauthorized access, damage, or disruption. Cyber security covers protecting computer systems. It also covers protecting networks and data. This protection is against unauthorized access, damage, or disruption. Read more: Cyber Security Basics and India's Framework.

Why does Critical Information Infrastructure, like power grids and banking networks, receive special protection?

Because disruption there has outsized national impact compared to ordinary systems. Critical Information Infrastructure includes systems like power grids and banking networks. It receives special protection. This is because disruption there has outsized national impact. Read more: Cyber Security Basics and India's Framework.

Why does the UIDAI carry significant cyber security responsibility?

Given the scale and sensitivity of the biometric data it holds through the Aadhaar identity system. The UIDAI runs India's Aadhaar identity system. It carries significant cyber security responsibility. This is given the scale and sensitivity of the biometric data it holds. Read more: Cyber Security Basics and India's Framework.

What genuine challenge does comparing India's cyber security legal regime with international frameworks reveal?

Cyber threats routinely cross national borders, but laws and enforcement powers largely stop at them. Comparing India's cyber security legal regime with international frameworks reveals a genuine challenge. Cyber threats routinely cross national borders. But laws and enforcement powers largely stop at those borders. Read more: Cyber Security Basics and India's Framework.

What does effective cyber security depend on, given how quickly threats and technology evolve?

Specialized training and intelligence operations, as much as any fixed set of technical safeguards. Cyber threats and defensive technology both keep evolving quickly. Effective cyber security depends on specialized training. It also depends on intelligence operations, as much as any fixed set of technical safeguards. Read more: Cyber Security Basics and India's Framework.

Cyber Security Basics and India’s Framework

Almost everything now runs on networks: money, power, phones, even your identity. So a single breach can disrupt a whole country. That is why cyber security is part of internal security. This article covers the basics and India’s own response.

Cyber security Protects systems, networks and data.

CERT-In India’s cyber incident watchdog.

Aadhaar Proof of identity, not citizenship.

2025 incidents 29.44 lakh, up 85% in two years.

CII: Critical information infrastructure.

CERT-In: Indian Computer Emergency Response Team.

UIDAI: Unique Identification Authority of India.

Puttaswamy: 2017 ruling making privacy a right.

Contents

Chapter 1: What Cyber Security Is
Chapter 2: India’s Cyber Framework
Chapter 3: The Story of the Aadhaar Giant
Chapter 4: Past Papers
Chapter 5: Current Affairs

1Chapter 1: What Cyber Security Is

Must Know

The definition

Cyber security means protecting computer systems, networks and data from unauthorised access, damage or disruption.
It sounds technical, but the stakes are not.
Money, power, health records and personal identity all run on networks.
A breach in one system can ripple into every system connected to it.
So cyber security is now a national security issue, not a quiet job in a server room.
As India digitises fast, its attack surface grows too.
Every new system that comes online is a new door an attacker may try.

Threats and critical infrastructure

Threats range from individual fraud, such as a stolen password or a phishing scam, to attacks on national infrastructure.
Power grids, banking networks and telecommunications count as “critical information infrastructure” under Indian law.
That label triggers a higher level of legal protection.
Why? Disrupting a power grid or a major bank does not stay inside one system.
It spreads and hits the whole country at once.
So the higher a system’s reach, the more it matters if it fails.

Remember: Critical information infrastructure = power, banking, telecom. Bigger reach means stricter legal protection.

True or False: Power grids, banks and telecom networks count as critical information infrastructure.

2Chapter 2: India’s Cyber Framework

Good to Know

Agencies and law

CERT-In, the Indian Computer Emergency Response Team, has been operational since January 2004.
It was created under Section 70B of the IT Act, 2000.
It is the nodal agency for handling cyber incidents, issuing alerts and coordinating the response.
The IT Act, 2000 is the legal base.
It defines and makes enforceable digital records, electronic signatures and cyber offences.
UIDAI runs Aadhaar and holds biometric data for well over a billion people.
That makes it the largest such database in the world.

The privacy balance

Surveillance meant to stop cyber threats can overreach against ordinary citizens.
The risk grows when a tool built for one purpose is reused for another.
The right to privacy is part of Article 21, following the Supreme Court’s 2017 Puttaswamy ruling.
Any security surveillance must now answer to that standard.
Courts require any limit on privacy to be backed by law and proportionate to the threat.
A broad “security” reason is not enough.
Both interests are real, and neither wins automatically.

Remember: CERT-In handles the incidents. The IT Act gives the legal teeth. UIDAI guards the biggest identity database on Earth.

Think it through: Think it through: why not just watch everyone?

Watching everyone would catch more attackers. But it would also catch millions of innocent people. The Constitution protects both safety and privacy. So the state must show a law and a proportionate reason each time.

True or False: Any limit on privacy for cyber security must be backed by law and be proportionate.

3Chapter 3: The Story of the Aadhaar Giant

Great to Know

What Aadhaar is

Aadhaar is a 12-digit biometric identity number run by UIDAI.
UIDAI was set up in 2009, with technology entrepreneur Nandan Nilekani as its first chairman.
It is the world’s largest biometric identity system, enrolling well over a billion people.
Aadhaar is proof of identity, not proof of citizenship.
Exams test this distinction often, and people who treat the two as the same lose marks.

The data risk

A database holding biometrics of over a billion people is an enormous target.
Criminals want to exploit it.
Privacy advocates worry about how far its reach should extend.

The court steps in

On 26 September 2018, the Supreme Court limited that reach directly.
It struck down Section 57 of the Aadhaar Act.
That section had let private companies, such as telecom operators and banks, demand Aadhaar authentication.
It also struck down Section 33(2).
That section had allowed disclosure of Aadhaar data on national-security grounds.
So one number verifies over a billion identities, and the court fenced in that reach once it grew too broad.

See the question on the name of UIDAI’s new Aadhaar app.

True or False: Aadhaar is proof of citizenship.

4Chapter 4: Past Papers

Exam Point of View

UPSC 2020: Aadhaar and data

The question gave statements about Aadhaar data, such as limits on storage and whether Aadhaar is mandatory for insurance.
The correct statements reflect the Supreme Court’s limits on Aadhaar use and data storage.
(Source: UPSC CSP 2020, Q1.)

UPSC 2018: Aadhaar and citizenship

The question asked whether Aadhaar is proof of citizenship.
It is not. It proves identity only.
The identity versus citizenship split is exactly what the exam tests.
(Source: UPSC CSP 2018, Q12.)

True or False: Aadhaar proves identity, not citizenship.

5Chapter 5: Current Affairs

Current Affairs

29.44 lakh incidents: CERT-In’s 2025 numbers

On 12 August 2026, the government told the Lok Sabha that CERT-In handled 29.44 lakh cyber security incidents in 2025.
That is up 85% from 15.92 lakh in 2023.
In the same year, CERT-In issued 1,530 alerts, 390 vulnerability notes and 65 advisories.
These are the routine output of the agency named above.
The 85% jump in two years shows India’s attack surface keeps growing as more systems come online. (Source: PIB, Assistance to States to Tackle Cyber Incidents.)

True or False: CERT-In handled 29.44 lakh cyber incidents in 2025.

Quick Q&A

Who runs Aadhaar? UIDAI.
CERT-In legal basis? Section 70B, IT Act 2000.
Section struck down on 26 Sept 2018? Section 57 and 33(2) of the Aadhaar Act.
Is Aadhaar proof of citizenship? No.
CERT-In incidents 2025? 29.44 lakh.

Answered 0 of 5 checks.