Cyber Infrastructure and Internet Governance in India

Cyber infrastructure and internet governance in India cover the institutional frameworks, legal statutes, exchange points, and technical standards that secure the country’s digital space and coordinate its internet operations. The Government of India balances domestic security needs, critical data protection, and global multi-stakeholder participation through dedicated operational agencies and technical exchange entities.

Statutory and Institutional Cybersecurity Architecture

National Cyber Security Coordinator (NCSC)

• The National Cyber Security Coordinator operates under the National Security Council Secretariat within the Prime Minister’s Office.
• The office acts as the apex nodal point for national cyber security strategy, inter-agency coordination, and national cyber defense policy.

Indian Computer Emergency Response Team (CERT-In)

• CERT-In is designated as the national nodal agency for incident response under Section 70B of the Information Technology Act, 2000.
• It functions under the Ministry of Electronics and Information Technology (MeitY).
• CERT-In collects, analyses, and disseminates information on cyber incidents, issues security advisories, and coordinates emergency containment measures.
• It operates the National Cyber Coordination Centre to detect potential threats and generate automated cyber threat intelligence.
• CERT-In guidelines mandate covered service providers and intermediaries to report cyber incidents within a mandatory six-hour reporting window.

National Critical Information Infrastructure Protection Centre (NCIIPC)

• Created under Section 70A of the Information Technology Act, 2000, NCIIPC is a unit of the National Technical Research Organisation (NTRO).
• It protects assets designated as Critical Information Infrastructure (CII), where disruption would impact national security, economy, public health, or safety.
• NCIIPC identifies critical sectors: Power and Energy, Banking and Finance, Telecom, Transport, Government, and Strategic Enterprises.

Indian Cybercrime Coordination Centre (I4C)

• Established by the Ministry of Home Affairs to tackle cybercrime across law enforcement agencies in a coordinated format.
• It operates the National Cybercrime Reporting Portal (cybercrime.gov.in) and the 1930 national helpline for citizen financial fraud reporting.
• It runs the National Cyber Forensic Laboratory to assist investigations with digital forensic tools.
• It coordinates Joint Cybercrime Coordination Teams across identified cybercrime hotspots.

Internet Infrastructure and Governance Entities

Internet Governance Models and Multi-Stakeholder Participation

India Internet Governance Forum (IIGF)

• The India Internet Governance Forum functions as the domestic chapter of the United Nations Internet Governance Forum.
• It follows a multi-stakeholder model bringing together government officials, private telecom and tech industries, civil society, and academia.
• The forum discusses public policy issues such as digital public infrastructure, data sovereignty, open standards, and digital access equity.

Multilingual Internet and Universal Acceptance

• India promotes the deployment of Internationalized Domain Names to allow domain registration and web browsing in Indian scripts.
• Universal Acceptance initiatives ensure that all domain names and email addresses in regional languages like Devanagari, Gurmukhi, and Tamil are accepted across web applications.
• The Ministry of Communications and MeitY coordinate national transitions to IPv6 to expand the availability of IP addresses.

Key Facts

• Section 70 of the Information Technology Act, 2000 grants the Union Government the power to declare any computer system as a Protected System.
• Section 70A of the IT Act designates the National Critical Information Infrastructure Protection Centre (NCIIPC) as the national nodal agency for critical infrastructure protection.
• Section 70B of the IT Act authorizes the Indian Computer Emergency Response Team (CERT-In) to handle national cyber incident responses.
• NIXI is a Section 8 non-profit company registered under the Companies Act to keep domestic internet traffic within the country.
• IRINN operates as the National Internet Registry under the Asia Pacific Network Information Centre (APNIC).
• The Cyber Multi Agency Centre (CyMAC) operates under the Multi Agency Centre platform to coordinate cyber intelligence sharing among agencies like IB, CERT-In, I4C, and NCIIPC.
• The 1930 helpline functions under the Citizen Financial Cyber Fraud Reporting and Management System run by I4C.
• Cyber Swachhta Kendra was established under the Digital India initiative to clean botnets and malicious software.