UPSC Mains 2015 GS Paper 3 Q20: model answer
Considering the threats cyberspace poses for the country, India needs a “Digital Armed Force” to prevent crimes. Critically evaluate the National Cyber Security Policy, 2013 outlining the challenges perceived in its effective implementation.
What the question wants
Critically evaluate the National Cyber Security Policy, 2013 and its implementation challenges, in the context of the call for a 'Digital Armed Force'.
How to structure it
Need, policy, evaluation.
- Why a 'digital force'
- NCSP 2013 features
- Achievements
- Implementation challenges
How to think it through
Need: rising cyber attacks, espionage (Snowden 2013 revelations), critical infrastructure. NCSP 2013: secure ecosystem, 24x7 NCIIPC, 5 lakh professionals in 5 years, CERT-In, indigenous products, testing, PPP, R&D, assurance framework, capacity building. Achievements: NCIIPC 2014, sectoral CERTs, Cyber Swachhta Kendra 2017, Defence Cyber Agency 2019, I4C 2020, NCSC. Challenges: no action plan/budget, skill target missed, dependence on imports, coordination across ministries, private sector compliance, states' capacity, outdated policy for AI/cloud/IoT, no NCSS final.
Model answer
The National Cyber Security Policy came out in July 2013, weeks after the Snowden revelations showed how deeply state agencies could spy on global networks. Its biggest promise was to train 5 lakh cyber professionals in five years, a sort of 'digital armed force' for India.
Key features of NCSP 2013
- A secure cyber ecosystem and assurance framework.
- A 24×7 NCIIPC to protect critical information infrastructure.
- CERT-In as the nodal agency for incident response, with sectoral CERTs.
- 5 lakh skilled professionals by 2018.
- Indigenous products, testing labs and R&D.
- Public-private partnership and information sharing.
What it achieved
- NCIIPC was set up in 2014.
- Cyber Swachhta Kendra (2017) for botnet cleaning.
- The Defence Cyber Agency (2019) and the I4C (2020).
- A National Cyber Security Coordinator in the NSCS.
Implementation challenges
- No time-bound action plan or budget came with the policy.
- The skills target was missed by a wide margin.
- Heavy reliance on imported hardware and software.
- Coordination gaps among many ministries and agencies.
- Private firms, which run much critical infrastructure, under-report breaches.
- States and police lack cyber capacity.
- The policy pre-dates cloud, AI, 5G and IoT; the promised National Cyber Security Strategy is still only a draft.
Evaluation
The policy got the vision right but not the machinery; India built agencies but not enough people.
A 'digital armed force' needs soldiers, and soldiers need training, budgets and a clear chain of command.
Draw: A gap chart: NCSP 2013 targets on one side, what was achieved on the other.
Keywords, cases and data to drop in
NCSP July 2013, Snowden, 5 lakh professionals, NCIIPC 2014, CERT-In, sectoral CERTs, Cyber Swachhta Kendra 2017, Defence Cyber Agency 2019, I4C 2020, NCSC, imported hardware, NCSS draft.
Where most answers lose marks
- Describing the policy's features without a critical evaluation.
Related Mains PYQs
- Explain how fake news and disinformation pose threat to Internal Security and Public Order in Indian context? In this regard, discuss salient… UPSC 2026 · GS-III
- Describe the context and salient features of the Digital Personal Data Protection Act, 2023. UPSC 2024 · GS-III
- Social media and encrypting messaging services pose a serious security challenge. What measures have been adopted at various levels to address the… UPSC 2024 · GS-III
- What are the different elements of cyber security? Keeping in view the challenges in cyber security, examine the extent to which India… UPSC 2022 · GS-III
Fresh examples from current affairs
Vehicle data sold for ₹5: Centre orders CERT-In audit of VAHAN, SARATHI and e-Challan portals
The Ministry of Road Transport and Highways has asked CERT-In, India’s cyber-security agency, for a forensic audit of its VAHAN, SARATHI, e-Challan and pollution-certificate portals. A security firm found that owners’ names, addresses and phone numbers were being sold through apps and a Telegram channel for as little as ₹5. On the same day, The Hindu reported a separate leak of film certification records. For you, this connects cyber security, the right to privacy and the Digital Personal Data Protection Act, 2023.
UPSC angle: Prelims: CERT-In, Section 70B IT Act, VAHAN/SARATHI, Puttaswamy, DPDP Act 2023, GDPR. · Mains GS-III: cyber security and data protection.
25 Oct 2026
eMudhra weak-key flaw: browsers block 8 certificates; what it means for India’s web trust
Google, Mozilla, Apple and Microsoft have blocked eight intermediate certificates of Bengaluru-based eMudhra, India’s largest certifying authority, after a researcher found their private keys were tiny numbers between 1 and 256 instead of proper 384-bit keys. eMudhra revoked them, CERT-In issued an advisory on 21 October 2026 and MeitY set up a special team. India’s regulated digital signatures and eSign are unaffected.
UPSC angle: Prelims: CCA, CERT-In, TLS, eSign. · Mains GS-III: cyber security, digital trust, data protection.
22 Oct 2026
Open-weight AI models: why Big Tech gives them away and what it means for India
In October 2026 alone, Reflection AI, Meta, NVIDIA and Mistral released or announced open-weight AI models. The Hindu explained on 20 October why firms spend heavily and then let anyone download the weights: to win developers, set standards and earn from cloud, chips and services. For India, open weights offer a base to build Indian-language AI, but they also bring safety risks.
UPSC angle: Prelims: weights, open-weight vs open-source, IndiaAI, AI4Bharat. · Mains GS-III: AI sovereignty, safety and regulation.
21 Oct 2026
Supreme Court: children have a right to the internet, and platforms must block child abuse material
In a judgment of 15 October 2026, the Supreme Court said that the right to access and use the internet is a fundamental right of every person, children included, under Article 21 read with Article 19(1)(a). So the answer to online danger is not to lock children out but to go after the abusive content and the platforms that fail to remove it. The Court ordered a National Hash and URL List Database, two-hour reporting of unknown abuse material, and loss of revenue for platforms that profit from it through paywalls.
UPSC angle: Prelims: Arts. 21 and 19(1)(a); POCSO s.15; IT Act ss.67B and 79; CSEAM. · Mains GS-II: rights of children, regulation of platforms.
18 Oct 2026Learn the concept
Question text as printed in the official UPSC Civil Services (Main) question paper. The model answer is original Battle IAS work; use it to learn structure, not to memorise.
Want every PYQ in one place? See the Battle IAS PYQ Book.