Lok Sabha Question No. 5451 (UNSTARRED), answered on 2022-04-05
Subject: Cyber Attacks
Ministry: INFORMATION AND BROADCASTING
Asked by: Behanan Benny

## Government of India

## Ministry of Information & Broadcasting Lok Sabha UNSTARRED QUESTION 5451 (TO BE ANSWERED ON 05.04.2022 )

## CYBER ATTACKS

5451 Shri Benny Behanan

## Will the Minister of Information and Broadcasting be pleased to state:

- a)  whether it is a fact that over 62% of Indian Small and Medium Businesses that participated in a study by CISCO, reported that they have lost more than Rs. 3.5 crores this year due to cyber attacks and if so, the details thereof;
- b)  whether the Government has taken any steps to help domestic businesses in strengthening their cyber security and if so, the details thereof;
- c) the annual report by the U.S.  China  Economic  and  Security  Review Commission found an increase in cyber attacks from Chinese organisations targetting India;
- d)  whether the Government has investigated these claims and made any efforts to strengthen cyber security from such attacks; and
- e)  if so, the details thereof?

## ANSWER

## THE MINISTER OF INFORMATION & BROADCASTING; AND MINISTER OF YOUTH AFFAIRS & SPORTS [SHRI ANURAG SINGH THAKUR]

(a) & (b) The Government is committed to ensure that the Internet in India is Open, Safe & Trusted and Accountable for all users. As per the information  received  from  Ministry  of  Electronics  and  Information Technology (MeitY), there are media articles, citing a report published by CISCO (a private US company), regarding losses to businesses due to  cyber-attacks.  The  findings  of  such  reports  by  private  companies are generally based on data generated by their products or survey of their customers. The Government does not subscribe to such reports.

(c) & (d) :  There  are  media  reports,  regarding  an  increase  in  cyber attacks  from  Chinese  organisations  targeting  India.  Indian  Computer Emergency  Response  Team  (CERT-In)  is  mandated  to  track  and monitor  cyber  security  incidents  in  India.  According  to  the  logs analysed and made available to Indian Computer Emergency Response Team (CERT-In), the Internet Protocol (IP) addresses of the computers from  where  the  attacks  appear  to  be  originated  belong  to  various countries.

- (e)    Government  has  taken  measures  to  enhance  the  cyber  security posture and prevent cyber security incidents, which inter alia, include:
- (i). The Indian  Computer  Emergency  Response  Team  (CERT-In) issues alerts and advisories regarding latest cyber threats/vulnerabilities and countermeasures to protect computers and networks on regular basis.
- (ii). CERT-In operates an automated cyber threat exchange platform for proactively collection, analysis and sharing of tailored alerts
- with organisations across sectors for proactive threat mitigation actions by them.
- (iii). A Cyber  Crisis  Management  Plan,  has  been  formulated  for countering cyber-attacks and cyber terrorism for implementation by  all  Ministries/  Departments  of  Central  Government,  State/UT Governments and their organizations and critical sectors.
- (iv). CERT-In regularly conducts workshops for Ministries, Departments, States & UTs and critical organizations to sensitize them about the cyber security threat landscape.
- (v). Cyber security mock drills are conducted regularly in Government and critical sectors. 64 such drills have so far been conducted by CERT-In  where  820  organisations  from  different  States  and sectors participated.
- (vi). Government has issued guidelines for Chief Information Security Officers  (CISOs)  in  Ministries/Departments  regarding  their  key roles and responsibilities for securing applications / infrastructure and compliance.

*****