Lok Sabha Question No. 454 (UNSTARRED), answered on 2022-07-19
Subject: Threat of Cyber Attacks
Ministry: HOME AFFAIRS
Asked by: Nishikant  Dubey

## GOVERNMENT OF INDIA MINISTRY OF HOME AFFAIRS

## LOK SABHA UNSTARRED QUESTION NO. 454

TO BE ANSWERED ON THE 19 TH  JULY, 2022/ ASHADHA 28, 1944 (SAKA)

THREAT OF CYBER ATTACKS

454. DR. NISHIKANT DUBEY:

Will the Minister of HOME AFFAIRS be pleased to state:

- (a)  whether  there  has  been  an  increasing  threat  of  cyber  attacks  in  the country;
- (b) if so, the details of cyber attacks reported during the last three years and the current year; and
- (c)  the  details  of  action  taken  by  the  Government  for  countering  cyber attacks?

ANSWER

MINISTER OF STATE IN THE MINISTRY OF HOME AFFAIRS (SHRI AJAY KUMAR MISHRA)

(a)& (b): As  per  the  information  reported  to  and  tracked  by  Indian Computer Emergency Response Team (CERT-In), a total number of 394499, 1158208,  1402809  and  674021  cyber  security  incidents  were  observed during the year 2019, 2020, 2021 and 2022 (upto June), respectively.

(c):   Government  has  taken  following  measures  to  enhance  the  cyber security posture and prevent cyber attacks:

- (i) Government issues alerts and advisories regarding latest cyber threats/vulnerabilities and countermeasures to protect computers and networks on regular basis.

## L.S.US.Q.NO. 454 FOR 19.07.2022

- (ii) Government is operating an automated cyber threat exchange platform  for  proactively  collecting,  analyzing  and  sharing  tailored alerts with organizations across sectors for proactive threat mitigation actions by them.
- (iii) Government  has  issued  guidelines  for  Chief  Information  Security Officers  (CISOs)  regarding  their  key  roles  and  responsibilities  for securing applications / infrastructure and compliance.
- (iv) All  the  government  websites  and  applications  are  audited  with respect to cyber security prior to their hosting.  The auditing of the websites  and  applications  is  conducted  on  a  regular  basis  after hosting also.
- (v) Government  has  empanelled  97  security  auditing  organisations  to support and audit implementation of Information Security Best Practices.
- (vi) Government  has  formulated  a  Cyber  Crisis  Management  Plan  for countering  cyber  attacks  and  cyber  terrorism  for  implementation  by all Ministries/ Departments of Central Government, State Governments and their organizations and critical sectors.
- (vii) Government is regularly conducting cyber security mock drills to enable assessment of cyber security posture and preparedness of

organisations  in  Government  and  critical  sectors;  workshops  for Ministries, Departments, States & UTs and organizations to sensitise them about the cyber security threat landscape and enable them to prepare  and  implement  the  Cyber  Crisis  Management  Plan  (CCMP); and  Government  also  conducts  training  programmes  for  network  / system administrators and Chief Information Security Officers (CISOs) of  Government  and  critical  sector  organisations  regarding  securing the IT infrastructure and mitigating cyber attacks.

- (viii) Government  is  operating  the  Cyber  Swachhta  Kendra  (Botnet Cleaning  and  Malware  Analysis  Centre).  The  centre  is  providing detection of malicious programs and free tools to remove the same.
- (ix) Government  has  set  up  the  National  Cyber  Coordination  Centre (NCCC) to generate necessary situational awareness of existing and potential cyber security threats. Phase-I of NCCC is operational.
- (x) CERT-In co-operates, works and coordinates incident response measures  with international CERTs,  overseas organisations and service providers as well as Law Enforcement Agencies.

***