Securing India’s sovereignty: Cyber threats, national security, and strategic policy responses

This research investigates India’s cybersecurity posture, aiming to identify vulnerabilities, assess policy effectiveness, and understand the challenges in its implementation. The objective is to offer data-driven recommendations to enhance the country’s cyber defense framework. A layered methodology was employed, combining secondary data from authoritative sources such as government publications, CERT-In, and IBM, along with primary data from surveys and interviews conducted with key stakeholders, including government officials, IT professionals, cybersecurity experts, and small-to-medium enterprise (SME) operators. The research utilizes SWOT and PESTLE analyses to assess the nation’s strengths, weaknesses, opportunities, and threats in cybersecurity. Additionally, qualitative data was analyzed using thematic coding with NVivo software to uncover systemic inefficiencies, skill gaps, and coordination breakdowns. The results reveal that India faced over 13,000 cyber incidents in 2023, with significant attacks in ransomware (1,200 cases, 43% increase), phishing (5,600 cases), and espionage (480 cases targeting defense agencies). Stakeholder feedback highlights key challenges: 68% of government officials pointed to bureaucratic delays, 74% of IT professionals reported skill shortages, and 81% of SMEs lacked basic cybersecurity resources. Furthermore, cybersecurity is underfunded, receiving less than 0.5% of the overall IT budget, limiting the nation's preparedness. High-risk threats such as cyber warfare and state-sponsored attacks were rated at 9.1 and 8.7 out of 10, respectively. The study concludes that India must modernize legislative frameworks, enhance institutional collaboration, and invest in cutting-edge technologies to build a resilient cybersecurity ecosystem.