Vol. 6, Issue 2, Part C (2024)

This study examines India's cybersecurity framework, seeking to uncover weaknesses, evaluate policy efficacy, and comprehend the obstacles associated with its implementation. The aim is to provide data-informed suggestions to improve the nation's cyber defence infrastructure. A stratified approach was utilised, integrating secondary data from reputable sources such as government publications, CERT-In, and IBM, alongside primary data obtained from surveys and interviews with pivotal stakeholders, including government officials, IT professionals, cybersecurity specialists, and small-to-medium enterprise (SME) operators. The study employs SWOT and PESTLE analyses to evaluate the country's strengths, weaknesses, opportunities, and threats in cybersecurity. Furthermore, qualitative data was examined using thematic coding utilising NVivo software to identify systemic inefficiencies, skill deficiencies, and coordination failures. The findings indicate that India encountered more than 13,000 cyber events in 2023, including notable increases in ransomware (1,200 instances, a 43% rise), phishing (5,600 cases), and espionage (480 cases directed at defence departments). Feedback from stakeholders underscores significant challenges: 68% of government officials identified bureaucratic delays, 74% of IT professionals noted talent constraints, and 81% of SMEs lacked fundamental cybersecurity tools. Moreover, cybersecurity is inadequately supported, obtaining less than 0.5% of the total IT budget, so constraining the nation's readiness. Cyber warfare and state-sponsored assaults were assessed at 9.1 and 8.7 out of 10, respectively, indicating high-risk threats. The report suggests that India needs modernise its legal frameworks, boost institutional coordination, and invest in advanced technology to establish a robust cybersecurity ecosystem.