Cyber Infrastructure and Internet Governance in India

India’s cyber infrastructure rests on a layered institutional framework that combines incident response, critical infrastructure protection, cybercrime coordination, and internet resource management. Alongside legal provisions under the Information Technology Act, 2000, these bodies help secure digital systems, manage internet operations, and support multi-stakeholder governance.

Statutory and Institutional Cybersecurity Architecture

• National Cyber Security Coordinator (NCSC): Works under the National Security Council Secretariat in the Prime Minister’s Office and serves as the apex nodal point for national cyber security strategy, inter-agency coordination, and cyber defence policy.
• CERT-In: The Indian Computer Emergency Response Team is the national nodal agency for incident response under Section 70B of the Information Technology Act, 2000. It functions under MeitY.
• CERT-In functions: It collects, analyses, and disseminates information on cyber incidents, issues security advisories, and coordinates emergency containment measures.
• Mandatory reporting: CERT-In guidelines require covered service providers and intermediaries to report cyber incidents within six hours.
• National Cyber Coordination Centre: CERT-In operates this centre to detect potential threats and generate automated cyber threat intelligence.
• NCIIPC: The National Critical Information Infrastructure Protection Centre was created under Section 70A of the Information Technology Act, 2000 and functions as a unit of NTRO.
• Role of NCIIPC: It protects assets designated as Critical Information Infrastructure, where disruption can affect national security, the economy, public health, or safety.
• Critical sectors: Power and Energy, Banking and Finance, Telecom, Transport, Government, and Strategic Enterprises are identified as critical sectors.
• I4C: The Indian Cybercrime Coordination Centre, set up by the Ministry of Home Affairs, coordinates cybercrime response across law enforcement agencies.
• I4C platforms: It runs the National Cybercrime Reporting Portal and the 1930 national helpline for reporting financial fraud.
• Forensic support: I4C operates the National Cyber Forensic Laboratory and coordinates Joint Cybercrime Coordination Teams in identified hotspots.

Internet Infrastructure and Resource Management

• NIXI: The National Internet Exchange of India, under MeitY, operates domestic Internet Exchange Points, manages the .IN Registry, and runs the Indian Registry for Internet Names and Numbers (IRINN).
• Domestic traffic: NIXI is a Section 8 non-profit company under the Companies Act and helps keep domestic internet traffic within the country.
• IRINN: The internet registry division of NIXI allocates IPv4 and IPv6 addresses as well as Autonomous System numbers within India.
• .IN Registry: It manages India’s country code top-level domain (.in) and Internationalized Domain Names in scheduled Indian languages.
• NIC: The National Informatics Centre under MeitY builds and maintains government network infrastructure, including NICNET, cloud systems, and central digital governance platforms.
• IPv6 transition: The Ministry of Communications and MeitY coordinate national transition to IPv6 to expand address availability.

Internet Governance and Multi-Stakeholder Participation

• India Internet Governance Forum (IIGF): It is India’s domestic chapter of the United Nations Internet Governance Forum.
• Multi-stakeholder model: The forum brings together government, private telecom and tech industry representatives, civil society, and academia.
• Policy themes: Discussions include digital public infrastructure, data sovereignty, open standards, and digital access equity.
• Governance approach: India balances domestic security needs, critical data protection, and global multi-stakeholder participation through institutional coordination and technical standards.

Multilingual Internet and Universal Acceptance

• Internationalized Domain Names: India promotes IDNs to enable domain registration and web browsing in Indian scripts.
• Universal Acceptance: This ensures that domain names and email addresses in regional languages are accepted across web applications.
• Indian scripts: Universal Acceptance supports languages such as Devanagari, Gurmukhi, and Tamil.

Key Legal and Institutional Facts

Key Prelims Takeaways

• CERT-In: National nodal agency for cyber incident response under Section 70B of the IT Act, 2000.
• NCIIPC: Protects Critical Information Infrastructure under Section 70A of the IT Act.
• I4C: Handles cybercrime coordination, the cybercrime portal, and the 1930 helpline.
• NIXI: Manages domestic internet exchange points and the .IN Registry.
• IRINN: Allocates IPv4, IPv6, and AS numbers in India.
• IIGF: India’s multi-stakeholder internet governance platform.
• Cyber Swachhta Kendra: Offers malware and botnet cleaning support for users.