Lok Sabha Question No. 232 (STARRED), answered on 2024-08-07
Subject: Shifting the Control of Cert-In from Meity to Ministry of Home Affairs
Ministry: ELECTRONICS AND INFORMATION TECHNOLOGY
Asked by: Shri Gaurav Gogoi

## GOVERNMENT OF INDIA MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY

## LOK SABHA

## STARRED QUESTION NO. *232

TO BE ANSWERED ON: 07.8.2024

## SHIFTING THE CONTROL OF CERT-IN FROM MEITY TO MINISTRY OF HOME AFFAIRS

## *232.   SHRI GAURAV GOGOI:

Will the Minister of ELECTRONICS AND INFORMATION TECHNOLOGY be pleased to state:

- (a) whether the Government is considering to give control of the Computer Emergency Response Team  (Cert-In) from the Ministry of Electronics and Information Technology to the Ministry of Home Affairs;
- (b) if so, the details thereof including the reasons therefor;
- (c) whether the Government has a long-term strategy to involve a multi-ministerial effort to deal with the growing complexity of cybersecurity matters; and
- (d) if so, the details thereof and if not, the reasons therefor?

## ANSWER

MINISTER OF ELECTRONICS AND INFORMATION TECHNOLOGY (SHRI ASHWINI VAISHNAW)

(a) to (d): A statement is laid on the Table of the House.

## STATEMENT REFERRED TO IN REPLY TO LOK SABHA STARRED QUESTION NO.  *232  FOR  07-8-2024  REGARDING  SHIFTING  THE  CONTROL  OF  CERT-IN FROM MEITY TO MINISTRY OF HOME AFFAIRS

………

(a) to (d):   Government of India's cyber security strategy centers upon a coordinated approach that  ensures  that  all  concerned  Ministries,  Departments  and  oragnisations  work  together  to address the complexity of cyber security matters. This includes coordination amongst different agencies  by  the  National  Cyber  Security  Coordinator  ('NCSC')  under  the  National  Security Council  Secretariat.The  key  functions  of  cyber  security  incident  response  management  and action to keep India's cyber space safe are taken by Cert-IN andNational Cyber Coordination Centre ('NCCC') under Ministry of Electronics and Information Technology.

Government  is  fully  cognizant  and  aware  of  growing  complexity  of  cybersecurity  matters. Government  has  taken  several  legal,  technical,  and  administrative  policy  measures  for addressing cyber security challenges in the country. The Government has also institutionalised a  nationwide  integrated  and  coordinated  system  to  deal  with  cyber-attacks  in  the  country which, inter alia, includes:

- i. National  Cyber  Security  Coordinator  (NCSC)  under  the  National  Security  Council Secretariat (NSCS) to ensure coordination amongst different agencies.
- ii. Under the provisions of section 70B of the  Information Technology Act, 2000, the Indian Computer Emergency Response Team (CERT-In) is designated as the national agency for responding to cyber security incidents.
- iii. National Cyber Coordination Centre (NCCC) implemented by the CERT-In serves as the control room to scan the cyberspace in the country and detect cyber security threats. NCCC  facilitates  coordination  among  different  agencies  by  sharing  with  them  the metadata from cyberspace for taking actions to mitigate cyber security threats.
- iv. Cyber  Swachhta  Kendra  (CSK)  is  a  citizen-centric  service  provided  by  CERT-In, which  extends  the  vision  of  Swachh  Bharat  to  the  Cyber  Space.  Cyber  Swachhta Kendra  is  the  Botnet  Cleaning  and  Malware  Analysis  Centre  and  helps  to  detect malicious  programs  and  provides  free  tools  to  remove  the  same,  and  also  provides cyber security tips and best practices for citizens and organisations.
- v. Ministry of Home Affairs (MHA) has created Indian Cybercrime Coordination Centre (I4C) to deal with cybercrimes in a coordinated and effective manner.
- vi. Under the provisions of section 70A of the Information Technology (IT) Act, 2000, the Government  has  established  National  Critical  Information  Infrastructure  Protection Centre (NCIIPC) for protection of critical information infrastructure in the country.
- vii. Department of Telecommunications has set up  a Telecom Security Operation Centre (TSOC),  for  monitoring  and  detecting  potential  cyber  threats to  the  Indian  telecom network and providing timely alerts to stakeholders for necessary actions.

********