Lok Sabha Question No. 457 (STARRED), answered on 2017-04-05
Subject: Cyber Security
Ministry: ELECTRONICS AND INFORMATION TECHNOLOGY
Asked by: RAJESH RANJAN  (PAPPU  YADAV), FAIZAL P.P. MOHAMMED

## GOVERNMENT OF INDIA

## MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY)

## LOK  SABHA STARRED QUESTION NO.  *457

TO BE ANSWERED ON: 05.04.2017

## CYBER SECURITY

## * 457   SHRI RAJESH RANJAN: MOHAMMED FAIZAL:

Will the Minister of Electronics & Information Technology be pleased to state:

- (a) the size of cyber security market in monetary term in the country and its projection by 2025;
- (b) whether the Government and the corporate world have come together to build the first platform for homegrown cyber security companies and if so, the details thereof along with the time by which the cyber security platform is likely to be prepared;
- (c) the solutions available at present to tackle challenges related to cyber security;
- (d) the amount of expenditure being incurred to strengthen the said measures; and
- (e) whether there are adequate number of cyber security experts in the country and if not, the reasons therefor and the steps being taken by the Government in this regard?

## ANSWER

MINISTER FOR ELECTRONICS AND INFORMATION TECHNOLOGY (SHRI RAVI SHANKAR PRASAD)

(a) to (e):    A Statement is laid on the Table of the House.

## STATEMENT REFERED TO IN REPLY TO LOK SABHA STARRED QUESTION *457 FOR  ON 05.04.2017 REGARDING CYBER SECURITY

- (a):   The National Association of Software and Services Companies (NASSCOM) and Data Security Council of India (DSCI) launched the 'Growing Cyber Security Industry, Roadmap for India Report ' in December 2016. The report defines a roadmap for the next 10 years for the growth of  Cyber Security market. According to the report, India's  domestic  cyber  security  market  was  estimated  to  be  nearly  US$  1.06  billion  in  2015.  Given  the  existing status and the possibility of rapid growth, NASSCOM report predicts India should aspire to build a cyber security product and services industry of US$ 35 billion by the year 2025, and generate a skilled workforce of one million in the security sector, to cater to the rise in global demand.
- (b):  National Cyber Security Policy (2013) prepared by Ministry of Electronics & Information Technology (MeitY) provides for developing effective public-private partnership and collaborative engagements through technical and operational co-operation and contribution for enhancing the security of cyberspace.

A Joint Working Group (JWG) for Public-Private Partnership (PPP) on cyber security has been set up at National Security  Council  Secretariat  (NSCS)  for  enhanced  cooperation  with  private  sector  associations.  JWG  on  cyber security  is  working  on  setting  up  of  Information  Sharing  and  Analysis  Centres  (ISACs)  in  critical  sectors  like Banking, Telecommunications and Power and establishments of Centres of Excellence on Policy Research Standard and  Audit  and  Capacity  Building  for  Law  Enforcement  Agencies  and  Cyber  Forensics.  It  is  also  working  on establishing testing labs for telecom and IT equipment under PPP model.

Also DSCI has created a platform for promoting Indian security startups companies and promoting them to reach out to client organizations, in India and abroad. Along with this, DSCI has started an initiative - Use Case Clearing House,  which  is  primarily  focusing  on  addressing  niche  security  requirements  in  user  companies  through collaboration with researches or startups.

- (c):  Government has adopted an integrated approach with a series of policy, legal, technical, awareness, training, and implementation of best practices to tackle cyber security concerns.    MeitY has also sponsored  R&D in the thrust areas  of  cyber security  including  (a)  Cryptography  and  cryptanalysis,  (b) Network  &  System  Security,  (c) Monitoring & Forensics and (d) Vulnerability Remediation & Assurance through sponsored projects at recognized R&D  organizations.  Also  Indian  Cyber  Security  organisations  are  working  on  a  wide  range  of  the  security technology capabilities by developing products and services.
- (d):   Rupees 500 Crores has been allocated for Ministry of Electronics and Information Technology (MeitY) in the 12th  Plan  period  (2012-17)  for  Cyber  Security  Programme  including  cyber  security  related  initiatives  such  as capacity building, training of workforce, implementing awareness programmes and Research and Development to check cyber crimes.  Further, a project for setting up of National Cyber Coordination Centre (NCCC) was initiated in April 2015 with an outlay of Rs. 985 crore over a period of 5 years.
- (e):  Towards enhancing qualified cyber security manpower, following steps have been taken :
- (i) Ministry of Electronics and Information Technology is implementing the Information Security Education and Awareness (ISEA) project which aims to generate 1.14 lakhs qualified professionals at various levels in period of 5 years.  A total of 51 institutions in various categories across the country are participating in the project.    Besides,  National  Institute  of  Electronics  and  Information  Technology  (NIELIT)  is  conducting certification courses for creation of cyber security professionals.
- (ii) Indian Computer Emergency Response Team (CERT-In) conducts regular training programme to make the network and system administrators aware about securing the IT infrastructure and mitigating cyber attacks. CERT-In  is  regularly  conducting  Cyber  Crisis  Management  Plan  (CCMP)  workshops  for  Central Government Ministries/Departments, States & UTs and critical sector organisations to sensitise them about the cyber security threat landscape, enabling them to prepare and implement the Cyber Crisis Management Plan as well as participate in the mock drill exercises.
- (iii) Cyber forensics training lab has been set up at Training Academy of Central Bureau of Investigation (CBI), Ghaziabad  to  impart  basic  and  advanced  training  in  cyber  forensics  and  investigation  of  cybercrimes  to police  officers.  In  addition,  Government  has  set  up  cyber  forensic  training  and  investigation  labs  in  the States of Kerala, Assam, Mizoram, Nagaland, Arunachal Pradesh, Tripura, Meghalaya, Manipur and Jammu & Kashmir for training of Law Enforcement and Judiciary in these States.
- (iv)       Data Security Council of India (DSCI), NASSCOM and Cyber Forensic Labs set up in certain States, have taken up tasks of awareness creation and training programmes on Cyber Crime investigation.  Academia

like  National  Law  School,  Bangalore  and  NALSAR  University  of  Law,  Hyderabad  are  also  engaged  in conducting  several  awareness  and  training  programmes  on  Cyber  Laws  and  Cyber  crimes  for  judicial officers. (v)                  NASSCOM  &  DSCI  have  been  working  under the aegis  of  National  Skill  Development  Corporation, Ministry of Skills, on developing standardized content for the key job roles that have been identified based

- on the industry inputs, requirements and response.

*********