Cyber threats and national security in India: Evaluating policy measures and emerging challenges

The research paper aims to assess the current state of cybersecurity in India, with a focus on its implications for national security and the effectiveness of existing policies in addressing emerging cyber threats. The objective is to identify gaps and challenges within India’s cybersecurity infrastructure, assess the impact on critical national sectors, and propose actionable solutions to enhance resilience. The research employs a qualitative-descriptive design, using secondary data from government publications, security think tanks, policy documents, and academic articles. Thematic content analysis is applied to explore key cybersecurity threats, national vulnerabilities, and policy responses. Additionally, a customized policy evaluation framework, based on global standards like NIST and ISO/IEC 27001, is used to assess India’s cybersecurity policies' comprehensiveness, efficiency, and effectiveness. Results indicate significant challenges faced by India, including high-impact threats such as phishing (34.67%), ransomware (25.33%), and cyber espionage (16.67%), primarily affecting defense, finance, and government sectors. Furthermore, there are substantial gaps in policy implementation, with weaknesses in inter-agency coordination, funding, and skilled workforce availability. The study identifies critical vulnerabilities in sectors like military readiness, economic stability, and public trust in government services, which have a direct impact on national security. In response, the research proposes key recommendations, including establishing a Central Cybersecurity Authority (₹500 crores, 300 reports/year), enhancing cybersecurity education and training (₹200 crores, 200 reports/year), and strengthening international cooperation (₹100 crores, 150 reports/year). These initiatives aim to address existing gaps, improve institutional readiness, and enhance India’s cybersecurity framework, ultimately strengthening national security and resilience against evolving cyber threats.