Lok Sabha Question No. 1623 (UNSTARRED), answered on 2025-12-10
Subject: Cyber Security Audit
Ministry: ELECTRONICS AND INFORMATION TECHNOLOGY
Asked by: Shri Satpal Brahamchari, Shri Jai Parkash

## GOVERNMENT OF INDIA MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY

## LOK SABHA UNSTARRED QUESTION NO. 1623

TO BE ANSWERED ON: 10.12.2025

## CYBER SECURITY AUDIT

## †1623. SHRI SATPAL BRAHAMCHARI: SHRI JAI PARKASH:

Will the Minister of ELECTRONICS AND INFORMATION TECHNOLOGY be pleased to state:

- (a)  whether  the  cyber  security  audit  has  been  made  mandatory  for  Government  offices  and  public institutions in Sonipat and Hisar Lok Sabha Constituencies under Digital India and if so, the details thereof;
- (b) the guidelines, training programmes and alert systems implemented by CERT-In to protect critical digital infrastructure;
- (c) whether the Government is implementing any special scheme for cyber awareness campaign, cyber helpline and promotion of secure digital payments in rural areas; and
- (d) if so, the details thereof?

## ANSWER

## MINISTER OF STATE FOR ELECTRONICS AND INFORMATION TECHNOLOGY (SHRI JITIN PRASADA)

(a) to (d): Government of India is cognizant of the cyber threats to India's digital infrastructure. Taking this into account, the policies of the Government aim for an open, safe, trusted and accountable internet for its users.

Indian Computer Emergency Response Team (CERT-In) and National Critical Information Infrastructure Protection Centre (NCIIPC) regularly carry out cybersecurity audits.

CERT-In  has  issued  a  Comprehensive  Cyber  Security  Audit  Policy  Guidelines  in  July  2025.  Cyber security audit are to be conducted at least once every year in a consistent, effective, and secure manner across sectors, including critical infrastructure.

NCIIPC undertakes vulnerabilities and risk assessment of Critical Information Infrastructure/ Protected Systems periodically and gives feedback to all concerned.

National  Informatics  Centre  (NIC)  also  carries  out  comprehensive  annual  cyber  security  audit  of  its Information and Communication Technology (ICT) infrastructure across the country.

The cyber security audit of NIC ICT infrastructure at Hissar and Sonipat district office has been conducted in year 2025.

The measures undertaken by government to strengthen security of cyber ecosystem, inter alia, includes:

- Cyber security training programs conducted by CERT-In in collaboration with Industry partners to upskill the cyber security workforce in Government, public and private organizations.
- Cyber security mock drills by CERT-In for assessment of cyber security posture and preparedness of organisations in Government and critical sectors.
- Empanelled 231 security auditing organizations by CERT-In to support and audit implementation of Information Security Best Practices.
- Cyber Crisis Management Plan formulated by CERT-In for countering cyber attacks and cyber terrorism for implementation by all Ministries/Departments.
- Alerts  and  advisories  issued  by  CERT-In  regarding  latest  cyber  threats/vulnerabilities  and countermeasures on an ongoing basis.
- Under Information Security Education and Awareness (ISEA) programme, 4,125 workshops have been  conducted,  reaching  over  9.25  lakh+  participants,  including  academia,  law  enforcement, government personnel and general public.
- Multilingual awareness materials such as handbooks, videos, posters, and advisories (including on deepfakes) are widely disseminated.
- Awareness resources are available on platforms like www.staysafeonline.in, www.infosecawareness.in, and www.csk.gov.in.
- Public  awareness  campaigns  such  as Cyber  Security  Awareness  Month & Safer  Internet  Day promote online safety, secure digital transactions, & cyber hygiene.
- Advisory by CERT-In to all authorised entities/banks issuing Prepaid Payment Instruments (PPI) in the country to carry out special audit by empanelled auditors of CERT-In on a priority basis.
- o Immediate steps are taken to ensure compliance with the findings and ensure implementation of security best practices.
- RBI's Public awareness campaign called 'RBI Kehta Hai' inform people about digital payment options and how to use them safely, securely, and conveniently
- Advisory by MHA to State/UT Governments to create mass awareness of National Cyber Crime Reporting Portal (https://cybercrime.gov.in) & Tollfree helpline number '1930'.
- Sanchar Mitras (Student volunteers -Department of Telecommunications) through communication in local languages educate citizens about digital safety, fraud prevention, and use of Sanchar Saathi portal.

*******