Lok Sabha Question No. 2519 (UNSTARRED), answered on 2022-03-16
Subject: cyber Attack on Infrastructure
Ministry: ELECTRONICS AND INFORMATION TECHNOLOGY
Asked by: Goddeti Madhavi

## GOVERNMENT OF INDIA MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY

## LOK SABHA

## UNSTARRED QUESTION NO. 2519

TO BE ANSWERED ON: 16.03.2022

## CYBER  ATTACK ON INFRASTRUCTURE

## 2519. SHRIMATI GODDETI MADHAVI:

Will the Minister of Electronics & Information Technology be pleased to state:-

- (a) whether  the  Union  Government  is  aware  of  the  risk  of  cyber  attacks  on  critical infrastructure including gas-water supply and security installations in the country;
- (b) if so, whether more than 600,000 cyber attacks have been reported in the country during the first-half of this year;
- (c) if so, the details thereof; and
- (d) whether  the  Union  Government  is  planning  cybersecurity  training  programmes  for Government employees on the lines of Andhra Pradesh Government's initiative to train Government employees on cyber security and if so, the details thereof and if not, the reasons therefor?

## ANSWER

## MINISTER OF STATE FOR ELECTRONICS AND INFORMATION TECHNOLOGY (SHRI RAJEEV CHANDRASEKHAR)

(a), (b) and (c): Yes, Sir.   The Government is committed to ensure that the Internet in India is Open,  Safe  &  Trusted  and  Accountable  for  all  users.  Indian  Computer  Emergency  Response Team (CERT-In) is mandated to track and monitor cyber security incidents in India. CERT-In has  reported  thata  total  number  of  1402809  &  212485  cyber  security  incidents  are  observed during the year 2021 & 2022 (upto February) respectively.

(d): Government has taken following measures to enhance the cyber security posture and build capacity in cyber security domain:

- i. Ministry of Electronics and Information Technology (MeitY) has implemented 'Information Security Education and Awareness' (ISEA) programme with the objective of capacity building in the area of Information Security, training of Government personnel and  creation  of  mass  Information  Security  awareness.  The  project  is  implemented involving  52  academic  and  training  institutions  across  the  country  through  formal  and non-formal courses.

Specific  books,  videos  and  online  materials  are  developed  for  children,  parents  and general  users  about  information  security  which  are  disseminated  through  portals  like 'www.infosecawareness.in', and 'www.cyberswachhtakendra.gov.in'.

- ii. MeitY offers generic training (awareness level) and foundation training (advanced level) online in Cyber Security for officers of Central Government Ministries/Departments. A total number of 10078 officers/staff from various Ministries/Departments have attended generic  training  (awareness  level)  and  605  officers/staff  have  successfully  completed foundation training (advanced level).
- iii. MeitY  conducts  deep  dive  training  on  cyber  security  for  Chief  Information  Security Officers  (CISOs)  and  frontline  IT  officials  from  Central/State  Governments,  Public Sector Undertakings (PSUs), PSU Banks and Government organisations in collaboration with industry consortium in Public Private Partnership (PPP) mode to enable them to deal with challenges of cyber security.
- iv. Indian  Computer  Emergency  Response  Team  (CERT-In)  conducts  regular  training programmes for network / system administrators and Chief Information Security Officers (CISOs)  of  Government  and  critical  sector  organisations  regarding  securing  the  IT infrastructure and mitigating cyber attacks. 15 and 19 training programs were conducted covering 708 and 5169 participants during the year 2020 and 2021 respectively.
- v. Cyber  security  exercises  and  drills  are  conducted  regularly  by  CERT-In  for  capacity building  and  to  enable  assessment  of  cyber  security  posture  and  preparedness  of organisations  in  Government  and  critical  sectors.  64  such  drills  have  so  far  been conducted  by  CERT-In  where  820  organizations  from  different  States  and  sectors participated.
- vi. CERT-In conducts workshops for Ministries, Departments, States & UTs and organizations to sensitise them about the cyber security threat landscape and enable them to  prepare  and  implement  the  Cyber  Crisis  Management  Plan  (CCMP).  128  CCMP workshops have been conducted till February 2022 by CERT-In. Out of these, 31 CCMP workshops conducted during the year 2021.
- vii. The cyber-security training programmes for employees of Government and Private Sector Utilities in the Power Sector are conducted through the designated Institutes like National Power Training Institute (NPTI).
- viii. Cyber security training besides awareness programs and sessions are conducted regularly for all Information Technology (IT) / Operational Technology (OT) personnel of Power Sector Utilities and other stake holders.

*******