National Cyber Security Policy 2013

The National Cyber Security Policy 2013 aims at

(1) facilitating the creation of secure computing environment

(2) enabling adequate trust and confidence in electronic transactions and

(3) guiding stakeholders actions for the protection of cyberspace.

National Cyber Security Policy is a policy framework by Department of Electronics and Information Technology.

The National Cyber Security Policy document outlines a roadmap to create a framework for comprehensive, collaborative and collective response to deal with the issue of cyber security at all levels within the country.

The “National Cyber Security Policy” has been prepared in consultation with all relevant stakeholders, user entities and public.

The policy recognises the need for objectives and strategies that need to be adopted both at the national level as well as international level.

VISION

To build a secure and resilient cyberspace for citizens, business, government and also to protect anyone from intervening in user's privacy.

MISSION 

To protect information and information infrastructure in cyberspace, build capabilities to prevent and respond to cyber threat, reduce vulnerabilities and minimize damage from cyber incidents through a combination of institutional structures, people, processes, technology, and cooperation.

Ministry of Communications and Information Technology (India) define objectives as follows:

1. To create a secure cyber ecosystem in the country, generate adequate trust and confidence in IT system and transactions in cyberspace and thereby enhance adoption of IT in all sectors of the economy.

2. To create an assurance framework for the design of security policies and promotion and enabling actions for compliance to global security standards and best practices by way of conformity assessment

(Product, process, technology & people).

3. To strengthen the Regulatory Framework for ensuring a SECURE CYBERSPACE ECOSYSTEM.

4. To enhance and create National and Sectoral level 24X7 mechanism for obtaining strategic information regarding threats to ICT infrastructure, creating scenarios for response, resolution and crisis

management through effective predictive, preventive, protective response and recovery actions.