Current Affairs

Sign in
বিজ্ঞান ও প্রযুক্তিGS3
GS3

Security Key Leak in Firm Serving Government and PSUs

Source:The Hindu ↗

কেন এটি গুরুত্বপূর্ণ

The incident underscores the systemic risks posed by third-party vendors and private entities handling sensitive government digital infrastructure, a vital focus area for India's internal security and cyber-resilience strategy.

সারসংক্ষেপ

Eight web security keys of eMudhra, a key digital signature and security solutions provider heavily relied upon by government entities and PSUs, have been leaked, raising major concerns regarding critical digital infrastructure security, data privacy, and vulnerability to cyber threats.

মূল বিষয়

  • Eight web security keys belonging to eMudhra, a prominent digital signature provider used by government agencies and Public Sector Undertakings (PSUs), were leaked.
  • The leak exposes vulnerabilities in critical digital infrastructure and identity management systems utilized by state organs.
  • Highlights the growing threat of cyber espionage and security lapses in private vendors servicing government infrastructure.
  • Emphasizes the need for stringent cybersecurity compliance, audits, and robust data protection frameworks.

গুরুত্বপূর্ণ শব্দ

eMudhra

A licensed Indian certifying authority providing digital signatures, trust services, and e-sign solutions relied upon by government departments, PSUs, and enterprises.

UPSC context

GS Paper III: Internal Security (Cybersecurity, Critical Infrastructure Protection, and e-governance vulnerabilities).

Source
Cert-In

India’s national nodal agency under the Ministry of Electronics and Information Technology (MeitY) responsible for responding to cyber security incidents and issuing advisories.

UPSC context

GS Paper III: Internal Security (Institutional frameworks, cyber incident response, and national digital security).

Source

সংযুক্ত স্থির ধারণা

Polity & Governance / Cyber Security

What are the statutory powers and mandate of CERT-In under the IT Act, 2000?

  • Statutory Basis: Established under Section 70B of the IT Act, 2000 as the national nodal agency for responding to computer security incidents.
  • Core Mandate: Mandated to collect, analyze, and disseminate information on cyber security incidents and issue vulnerability alerts.
  • Incident Direction: Empowered to issue mandatory directions to service providers, intermediaries, and data centres to take action or provide information.

আন্তঃবিষয় প্যাটার্ন

  • Public-Private Partnerships & Cyber Vulnerabilities

    Reliance on private vendors for e-governance exposes public infrastructure to supply chain cyber attacks, testing statutory oversight under the IT Act.

  • Critical Infrastructure & National Security Strategy

    Compromised cryptographic keys in government systems highlight the intersection of data protection legislation, National Cyber Security Strategy, and third-party risk.

CERT-In statutory powers under IT Act 70B and third-party vendor risks in e-governance likely to be paired in a multi-statement Q.

সংযুক্ত PYQ · 3

সংযুক্ত PYQ · 3

  • 2022MainsGS3

    What are the different elements of cyber security ? Keeping in view the challenges in cyber security, examine the extent to which India has successfully developed a comprehensive National Cyber Security Strategy.

  • 2021MainsGS3

    Keeping in view India's internal security, analyse the impact of cross-border cyber attacks. Also discuss defensive measures against these sophisticated attacks.

  • 2017MainsGS3

    Discuss the potential threats of Cyber attack and the security framework to prevent it.