By Shikhil Sharma

Cyberspace security has become the need of the hour as companies increasingly switch to digital business models. Cyber security hasbecome a common concern (and term) in the boardroom meetings. &nbsp;

With an active rise in the interest of cybersecurity and having an on ground view of the threats we face as a nation - I think the following 5 points should be included in our new cyber security policy, with a revision every 2-3 years

1. State-sponsored threat retaliation strategy

One of the biggest threats a nation faces is state-sponsored targeted threats from other nations. Quite recently, Australia became victim of a state-sponsored attack. In such attacks government infrastructure, private infrastructure and citizens are targeted at the same time in a series of cyber attacks. This Advansed Persistent Threat (APT) is something which poses a big challenge.&nbsp;

Truth be told, just having a policy to tackle state sponsored APT won’t be enough. The policy needs to define a ‘retaliation’ action plan too.&nbsp;

Important points to be noted:

<ul>
	<li>The policy should define or make a provision to define an ‘action plan’ in case of a state sponsored attack.</li>
	<li>Containing the APT won’t be enough. There needs to be a clear ‘trapping’ plan to have enough data on the origin of the APT or state sponsored threat.</li>
	<li>A retaliation plan should also be in place if need arises to fend off the enemy.</li>
	<li>These plans need to have a clear flow from policy to a government department executing it. ‘Mock drills’ for such scenarios need to be done.</li>
</ul>

2. SOS lockdown policy

When a cyber attack happens, there can be a mass disruption in services/infrastructure. There needs to be a clear nationwide lockdown policy for key infrastructure of the nation. We are talking about nuclear grids, power grids, financial institutions, satellite communication etc.&nbsp;

Whenever a nation wide security incident/attack happens, it’s often well thought out and planned for months if not years. In such cases, the bad actors know which components to target first. This makes it important to have a lockdown policy to ensure critical infrastructure is protected during such time and damage is controlled.

Important points to be noted:

<ul>
	<li>SOS lockdown policy should not be made public fully as that might give enemy the information.</li>
	<li>The lockdown policy will require cyber security specialists to be deployed or trained in each of the critical sectors.</li>
</ul>

3.&nbsp;Security framework for 5G &amp; iOT devices

With 5G setting foot, the rise of iOT devices is inevitable. This means more devices connected to the internet and each other. This also means ‘smart’ being appended to everything we can think of.&nbsp;

This calls for a security standard to be defined for all the 5G devices coming to the market. The best case would be the government defining security standards of these new internet connected devices with the help of security companies.

Also Read : <a href="https://www.wionews.com/world/now-eu-imposes-cyberattack-sanctions-on-chinese-nationals-linked-to-chinese-intelligence-agency-318078">Now, EU imposes cyberattack sanctions on Chinese nationals linked to Chinese intelligence agency</a> 
&nbsp;

Important points to be noted:

<ul>
	<li>A clearly defined certification or ‘standard’ needs to be put out for iOT devices.</li>
	<li>Government or government authorized departments/companies should ensure these newly entering iOT devices meet privacy requirements and security standards ensuring private data of citizens isn’t at risk.</li>
	<li>These are the devices which will be kept at our homes, in our cars &amp; bedrooms - the privacy risks can be un-imaginable. One cannot take any risk with this one.</li>
</ul>

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="http://13.235.153.162/videos/imagine-downloading-netflix-library-in-less-than-one-second-fastest-internet-speed-recorded-in-uk-322964/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

&nbsp;

 
4. Nationwide cyber security training

India has the responsibility of bringing 600 million+ population to the internet ‘safely’. It should also be ensured that current population already on the internet (over 700 million) is security conscious.

Important points to be noted:

<ul>
	<li>‘We are as strong as our weakest link’, our training programs should be built with this principle in mind. When it comes to cyber security, even in most tech savvy organizations, humans have been found to be the weakest links.</li>
	<li>This nationwide training has to be done in a way that less savvy people understand at least basic do’s and don'ts of the internet&nbsp;</li>
	<li>Our banks have been largely successful in raising awareness around banking frauds. It’s always a work in progress, but in today’s world more people understand that they don’t have to give their online banking password, CVV or any other sensitive information to anyone, even if the other person claims to be a bank official. Such awareness will definitely meet a certain threshold of cyber security. Ofcourse, such models are constantly evolving.</li>
	<li>Training over SMS, IVR and emails need to be made at a mass scale, in a way the common man understands.</li>
</ul>

5. Enforcing security standards on private companies &amp; rewarding&nbsp;

The nation should have a cyber security standard defined for every private company. Every company uses emails for communication and has a website even if it is not an internet business. The government should clearly define what is expected of private companies when it comes to cyber security and what are the consequences of not meeting the expectations. Ideally, this should be not more than a 2 page checklist. Making it straightforward and easy to understand will encourage companies to follow the guidelines.&nbsp;

When a country faces a cyber security challenge, its private organizations are also on the radar of hackers. It’s important their infrastructure is also secure.

Important points to be noted:

The security standards defined for private companies should be in checklist form.

<ul>
	<li>Government should reward the organizations that follow these standards. This reward can be in the form of publicly displayable certificates which can be verified on government websites or even some tax rebates.</li>
</ul>

 
The fact that our government is talking about updating our cyber security policy and preparing it for the upcoming innovations means that we’re headed in the right direction. Considering the privacy concerns and data at stake, information security is not a luxury but a necessity. Having a strong cyber security policy means that the government is not only looking out for the data of its citizens but also inspiring confidence so that foreign companies choose India over other nations for their expansion.

I strongly believe that countries having a strong cyber security policy that can be implemented neatly will have a massive advantage on all fronts in years to come.

By Shikhil Sharma Cyberspace security has become the need of the hour as companies increasingly switch to digital business models. Cyber security hasbecome a common concern (and term) in the boardroom meetings.

By Shikhil Sharma Cyberspace security has become the need of the hour as companies increasingly switch to digital business models. Cyber security hasbecome a common concern (and term) in the boardroom meetings. With an active rise in the interest of cybersecurity and having an on ground view of the threats we face as a nation - I think the following 5 points should be included in our new cyber security policy, with a revision every 2-3 years 1. State-sponsored threat retaliation strategy One of the biggest threats a nation faces is state-sponsored targeted threats from other nations. Quite recently, Australia became victim of a state-sponsored attack. In such attacks government infrastructure, private infrastructure and citizens are targeted at the same time in a series of cyber attacks. This Advansed Persistent Threat (APT) is something which poses a big challenge. Truth be told, just having a policy to tackle state sponsored APT won’t be enough. The policy needs to define a ‘retaliation’ action plan too. Important points to be noted: The policy should define or make a provision to define an ‘action plan’ in case of a state sponsored attack. Containing the APT won’t be enough. There needs to be a clear ‘trapping’ plan to have enough data on the origin of the APT or state sponsored threat. A retaliation plan should also be in place if need arises to fend off the enemy. These plans need to have a clear flow from policy to a government department executing it. ‘Mock drills’ for such scenarios need to be done. 2. SOS lockdown policy When a cyber attack happens, there can be a mass disruption in services/infrastructure. There needs to be a clear nationwide lockdown policy for key infrastructure of the nation. We are talking about nuclear grids, power grids, financial institutions, satellite communication etc. Whenever a nation wide security incident/attack happens, it’s often well thought out and planned for months if not years. In such cases, the bad actors know which components to target first. This makes it important to have a lockdown policy to ensure critical infrastructure is protected during such time and damage is controlled. Important points to be noted: SOS lockdown policy should not be made public fully as that might give enemy the information. The lockdown policy will require cyber security specialists to be deployed or trained in each of the critical sectors. 3. Security framework for 5G & iOT devices With 5G setting foot, the rise of iOT devices is inevitable. This means more devices connected to the internet and each other. This also means ‘smart’ being appended to everything we can think of. This calls for a security standard to be defined for all the 5G devices coming to the market. The best case would be the government defining security standards of these new internet connected devices with the help of security companies. Also Read : Now, EU imposes cyberattack sanctions on Chinese nationals linked to Chinese intelligence agency Important points to be noted: A clearly defined certification or ‘standard’ needs to be put out for iOT devices. Government or government authorized departments/companies should ensure these newly entering iOT devices meet privacy requirements and security standards ensuring private data of citizens isn’t at risk. These are the devices which will be kept at our homes, in our cars & bedrooms - the privacy risks can be un-imaginable. One cannot take any risk with this one. × 4. Nationwide cyber security training India has the responsibility of bringing 600 million+ population to the internet ‘safely’. It should also be ensured that current population already on the internet (over 700 million) is security conscious. Important points to be noted: ‘We are as strong as our weakest link’, our training programs should be built with this principle in mind. When it comes to cyber security, even in most tech savvy organizations, humans have been found to be the weakest links. This nationwide training has to be done in a way that less savvy people understand at least basic do’s and don'ts of the internet Our banks have been largely successful in raising awareness around banking frauds. It’s always a work in progress, but in today’s world more people understand that they don’t have to give their online banking password, CVV or any other sensitive information to anyone, even if the other person claims to be a bank official. Such awareness will definitely meet a certain threshold of cyber security. Ofcourse, such models are constantly evolving. Training over SMS, IVR and emails need to be made at a mass scale, in a way the common man understands. 5. Enforcing security standards on private companies & rewarding The nation should have a cyber security standard defined for every private company. Every company uses emails for communication and has a website even if it is not an internet business. The government should clearly define what is expected of private companies when it comes to cyber security and what are the consequences of not meeting the expectations. Ideally, this should be not more than a 2 page checklist. Making it straightforward and easy to understand will encourage companies to follow the guidelines. When a country faces a cyber security challenge, its private organizations are also on the radar of hackers. It’s important their infrastructure is also secure. Important points to be noted: The security standards defined for private companies should be in checklist form. Government should reward the organizations that follow these standards. This reward can be in the form of publicly displayable certificates which can be verified on government websites or even some tax rebates. The fact that our government is talking about updating our cyber security policy and preparing it for the upcoming innovations means that we’re headed in the right direction. Considering the privacy concerns and data at stake, information security is not a luxury but a necessity. Having a strong cyber security policy means that the government is not only looking out for the data of its citizens but also inspiring confidence so that foreign companies choose India over other nations for their expansion. I strongly believe that countries having a strong cyber security policy that can be implemented neatly will have a massive advantage on all fronts in years to come.

5 essential points that should make it to India’s new cyber security policy

Nepal will receive internet bandwidth from China from tomorrow, ending the Himalayan nation&#39;s sole dependence on India for connecting to the cyberspace.

State-owned telecom company Nepal Telecom (NT) said that all the groundwork has been completed to formally connect Nepal with Chinese bandwidth from January 12.

&quot;The process of acquiring internet bandwidth from China has been completed. The commercial operation of the Nepal- China optical fibre link will begin from Friday, said Prativa Baidhya, spokesperson for NT.

However, NT did not disclose the actual volume of Chinese internet bandwidth that Nepal will receive.

The details will be made public after a formal inauguration tomorrow, she added.

In December 2016, NT had reached an agreement with China Telecom to acquire internet bandwidth. NT had begun the test transmission of the project from the first week of September last year.

With successful test transmission, Nepal will now be commercially connected with Chinese bandwidth, according to the official.

Chinese internet will be supplied via Rasuwagadhi gateway, according to sources at NT.

As the use of Internet has been increasing rapidly in the country, Chinese internet bandwidth is taken as an alternative source for Nepal to meet the ever-increasing bandwidth demand, she said.

The commercial operation of the Chinese bandwidth project will end Nepal&#39;s sole dependence on India for internet bandwidth.

Nepal is currently linked to the global internet connectivity through Indian telecom operators via different optical fibre connections in Biratnagar, Bhairahawa and Birgunj, among others, the Himalayan Times reported.

Besides ending the monopoly of bandwidth supply, the Chinese Internet gateway is also expected to facilitate service providers in Nepal to establish bandwidth connection with other countries via China.

Though Nepal Telecom is purchasing limited volume of the Internet from China in the first phase, the company will increase the volume of Chinese internet gradually in the coming days. 
&nbsp;

Nepal Telecom did not disclose the actual volume of Chinese internet bandwidth that Nepal will receive

Nepal will receive internet bandwidth from China from tomorrow, ending the Himalayan nation's sole dependence on India for connecting to the cyberspace. State-owned telecom company Nepal Telecom (NT) said that all the groundwork has been completed to formally connect Nepal with Chinese bandwidth from January 12. "The process of acquiring internet bandwidth from China has been completed. The commercial operation of the Nepal- China optical fibre link will begin from Friday, said Prativa Baidhya, spokesperson for NT. However, NT did not disclose the actual volume of Chinese internet bandwidth that Nepal will receive. The details will be made public after a formal inauguration tomorrow, she added. In December 2016, NT had reached an agreement with China Telecom to acquire internet bandwidth. NT had begun the test transmission of the project from the first week of September last year. With successful test transmission, Nepal will now be commercially connected with Chinese bandwidth, according to the official. Chinese internet will be supplied via Rasuwagadhi gateway, according to sources at NT. As the use of Internet has been increasing rapidly in the country, Chinese internet bandwidth is taken as an alternative source for Nepal to meet the ever-increasing bandwidth demand, she said. The commercial operation of the Chinese bandwidth project will end Nepal's sole dependence on India for internet bandwidth. Nepal is currently linked to the global internet connectivity through Indian telecom operators via different optical fibre connections in Biratnagar, Bhairahawa and Birgunj, among others, the Himalayan Times reported. Besides ending the monopoly of bandwidth supply, the Chinese Internet gateway is also expected to facilitate service providers in Nepal to establish bandwidth connection with other countries via China. Though Nepal Telecom is purchasing limited volume of the Internet from China in the first phase, the company will increase the volume of Chinese internet gradually in the coming days.

Nepal to use Chinese internet bandwidth from tomorrow, India's monopoly to end

Prime Minister Narendra Modi on Thursday suggested nations to adopt stricter rules on preventing cyberspace from becoming a platform for &#39;dark forces of terrorism and radicalisation,&quot; while addressing the crowd in the cyberspace conference.&nbsp;

&quot;We need to ensure that vulnerable sections of our society do not fall prey to the evil designs of cyber criminals. Alertness towards cyber-security concerns should become a way of life. Nations must also take a responsibility to ensure that the digital space does not become a playground for the dark forces of terrorism and radicalisation,&quot; he said.&nbsp;

Further, the Prime Minister said it was necessary for the global community to approach the issue of cyber-security with conviction.

&#39;Cyber for All: A Secure and Inclusive Cyberspace for Sustainable Development&#39; is a two-day event which is being organised for the first time in India.

More than ten&nbsp;thousand delegates have taken part in the conference in person which will also include virtual participation from over 2800 locations across the world that will be connected in an interactive mode.

The conference has been organised to encourage people to take steps to prevent cyber-crime and signify the inclusiveness and human rights in global cyber policy.

&quot;The GCCS 2017 is certainly in accord with the Hon&#39;ble Prime Minister&#39;s vision to transform India into a digitally empowered country. GCCS 2017 will give the world&#39;s cyber community a unique opportunity to learn from global experience and expert insight, and discover more about the technology led transformation being engineered in India,&quot; Ravi Shankar Prasad, Electronics &amp; IT and Law &amp; Justice Minister said on Wednesday, as reported by the media.

External Affairs Minister Sushma Swaraj will deliver the keynote address at the valedictory function.

&nbsp;

(with input from agencies)&nbsp;

Prime Minister Narendra Modi on Thursday inaugurated 5th Global Conference on 'Cyber Space', a two-day event, in the national capital.

Prime Minister Narendra Modi on Thursday suggested nations to adopt stricter rules on preventing cyberspace from becoming a platform for 'dark forces of terrorism and radicalisation," while addressing the crowd in the cyberspace conference. "We need to ensure that vulnerable sections of our society do not fall prey to the evil designs of cyber criminals. Alertness towards cyber-security concerns should become a way of life. Nations must also take a responsibility to ensure that the digital space does not become a playground for the dark forces of terrorism and radicalisation," he said. Further, the Prime Minister said it was necessary for the global community to approach the issue of cyber-security with conviction. 'Cyber for All: A Secure and Inclusive Cyberspace for Sustainable Development' is a two-day event which is being organised for the first time in India. More than ten thousand delegates have taken part in the conference in person which will also include virtual participation from over 2800 locations across the world that will be connected in an interactive mode. The conference has been organised to encourage people to take steps to prevent cyber-crime and signify the inclusiveness and human rights in global cyber policy. "The GCCS 2017 is certainly in accord with the Hon'ble Prime Minister's vision to transform India into a digitally empowered country. GCCS 2017 will give the world's cyber community a unique opportunity to learn from global experience and expert insight, and discover more about the technology led transformation being engineered in India," Ravi Shankar Prasad, Electronics & IT and Law & Justice Minister said on Wednesday, as reported by the media. External Affairs Minister Sushma Swaraj will deliver the keynote address at the valedictory function. (with input from agencies)

Digital space should not become playground for dark forces of terrorism: PM Modi

Prime Minister Narendra Modi inaugurated the 5th Global Conference on &#39;Cyber Space&#39;, a two-day event, in the national capital on Thursday.

The event is being organised for the first time in India.

The theme of the conference is &#39;Cyber for All: A Secure and Inclusive Cyberspace for Sustainable Development.&#39;

Representatives from around 124 countries and 33 Ministerial delegates from 31 countries, including Prime Minister of Sri Lanka Ranil Wickremasinghe, will attend the conference.

The conference is being organised to promote the importance of inclusiveness and human rights in global cyber policy.

Over 10 thousand delegates will take part in the conference in person. There will also be virtual participation from over 2800 locations across the world that will be connected in an interactive mode.&nbsp;

The event is being organised for the first time in India

Prime Minister Narendra Modi inaugurated the 5th Global Conference on 'Cyber Space', a two-day event, in the national capital on Thursday. The event is being organised for the first time in India. The theme of the conference is 'Cyber for All: A Secure and Inclusive Cyberspace for Sustainable Development.' Representatives from around 124 countries and 33 Ministerial delegates from 31 countries, including Prime Minister of Sri Lanka Ranil Wickremasinghe, will attend the conference. The conference is being organised to promote the importance of inclusiveness and human rights in global cyber policy. Over 10 thousand delegates will take part in the conference in person. There will also be virtual participation from over 2800 locations across the world that will be connected in an interactive mode.

PM Modi inaugurates 5th Global Conference on 'Cyber Space'

cyber-space

Cyber Space, News on Cyber Space, stories on Cyber Space, articles on Cyber Space, Cyber Space stories at Wion, Cyber Space news, Cyber Space latest news

cyber space

5 essential points that should make it to India’s new cyber security policy

Nepal to use Chinese internet bandwidth from tomorrow, India's monopoly to end

Digital space should not become playground for dark forces of terrorism: PM Modi

PM Modi inaugurates 5th Global Conference on 'Cyber Space'