In continuation of our discussions on the IN-CRA act, the next big hurdle we need to tackle is bringing about the integration of the private sector into this initiative.
The Private sector is important for Cyber Resilience since the expertise in threat hunting and information security lies in private sector, some academic institutions and NGOs. Government has to borrow these resources besides developing their own expertise.
Private Sector however has the commercial constraints and the fear of loss of reputation if any security weaknesses become public. Hence even the data breach notification systems donot work efficiently due to large scale under reporting of incidents.
We need to therefore build one industry level institution and link it to the Government infrastructure to infuse more confidence. These should consist of sector wise leaders who collaborate as a federation of Cyber Security agencies.
The Government organizations like CERT In can work more smoothly with such industry representing organizations. Academic institutions and NGOs can provide leadership of such sectoral committees and act as buffer zones to build trust in ensuring flow of sensitive security information from the victims of Cyber attacks which are commercial entities to the agencies like CERT In.
A serious debate is required on this type of industry bodies.
In the past MeitY did dry to promote self regulatory bodies for digital media regulation but the industry did not respond positively. We need to continue our efforts to persuade the industry to shed their inhibitions and start cooperating with the Government as a duty towards national security.
This can be done only through an enforceable law with deterrents and recognition of a constitutional right “Right to Security” as an apex component of “Right to life”. The Judiciary needs to accept this “Right” as part of our constitutional Right. No other Right exists when we no longer exist. This truth is today forgotten by our Judiciary and they need to realize this.
Please feel free to comment.
Naavi
Naavi
