NSA: Comprehensive Cyber security policy created by Govt.

NEW DELHI: India is creating a "coherent and comprehensive" security policy to deal with the "anarchic new world" of Cyber threats, National Security Adviser Shivshankar Menon said.
"(The) government is in the process of putting in place the capabilities and the systems in India that will enable us deal with this anarchic new world of constant and undeclared Cyber threat, attack, counter-attack and defence," he said at the release of a report on "India's Cyber Security Challenge" by the Institute of Defence Studies and Analyses (IDSA).
 This will be a step toward the "coherent and comprehensive Cyber security policy" that the report calls for, he added.
Menon noted in this context that while the National Technical Research Organisation is tasked to deal with protecting India's critical security Cyber infrastructure, institutions like CERT-IN (Computer Emergency Response Team-India) "have proved their worth during events like the 2010 Commonwealth Games when a staggering 8,000 Cyber attacks were warded off.
"We are making a beginning in putting in place a system of certification and responsibility for telecommunication equipment and are working on procedures and protocols which will rationalize communication interception and monitoring," he said.
Simultaneously, "we need to harden our critical networks. And, we will develop metrics to certify and assure that our critical Cyber networks, equipment and infrastructure are secure", he added.
He pointed out the need to "create a climate and environment within which security is built into our Cyber and communications working methods".
All this had to be more than just a "whole-of-government" effort, Menon said.
"It must include the entire scientific and technological strength of the country, whether in laboratories, universities or in our private sector firms," Menon said.
Hoping that the report "will also bring some reason and proportion" into the discussion on Cyber security, he said: "There is invariably a hullabaloo when one of our websites is hacked. But websites are meant to be hit.
"Their success is measured by how many people access or hit them. So when a website is defaced by hackers, as happened to the CBI website, it is not necessarily a security breach though it might hurt one's pride."
At the same time, Menon admitted that one reason for public concern and anxiety "is the anarchic nature of the domain of Cyber space, glimpses of which naturally cause alarm.
"When this is combined with the potential effects of malicious attacks and disruptions in the Cyber world upon such basic social necessities as power supplies, banking, railways, air traffic control, it is only natural that people should worry about Cyber security," he added.