Internal Security

Cybersecurity and communication networks

General-studies learner with basic Indian constitutional institutions and the Science computing/network foundation; no policing or technical security background assumed.

Includes

• Assigned sections and concise recall notes
• Available mapped practice and analysis of mistakes
• One initial closed-book review

Separate time needed

• Later revision and full mock tests
• Continuing current-affairs updates
• Technical security operations or legal-professional training
• Foundational constitutional and network material budgeted in other subjects

Editorial planning estimate; not learner timing data

• Computer Networks ↗

  Sections 5.7–5.8, PDF pages 15–16; virus and firewall explanations, not categorisation of spam as malware

• Cyber Security Awareness Booklet ↗

  Phishing, Vishing, Malicious Mobile Applications and Social Media Frauds, PDF pages 4–8

• Computer Networks ↗

  Sections 5.7–5.8, PDF pages 15–16; virus and firewall explanations, not categorisation of spam as malware

• Cyber Security Awareness Booklet ↗

  Attacks Targeting Organisation and Basic Cyber Hygiene, PDF pages 13–15; named controls only, excluding routine password-rotation advice

• Ministry of Home Affairs Annual Report 2024–2025 ↗

  Paragraphs 13.3.1–13.4.6, printed pages 276–280, PDF pages 282–286; functions, not counts or savings claims

• Cyber Security Awareness Booklet ↗

  Preface and reporting sections, PDF pages 3 and 17

• Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events, SP 1800-26A ↗

  Executive Summary opening definitions and Challenge only: confidentiality, integrity, availability and ransomware disruption. Exclude the old CSF 1.1 list and vendor implementation details.

• The NIST Cybersecurity Framework 2.0 ↗

  Preface; section 2, printed pages 3–5 / PDF pages 8–10; section 5 privacy and supply-chain discussion, printed pages 12–14 / PDF pages 17–19. General risk-management model, not an Indian legal mandate or a prescribed sequence of steps.

• CERT-In Advisory CIAD-2016-0069: selected DoS definition ↗

  Attack Vectors, first paragraph: DoS and distributed DoS. Exclude the amplification instructions and the outdated general smartphone/ransomware advice.

• Information Technology Act, 2000: selected statutory framework ↗

  Sections 69(1)–(3), 70(1)–(2), 70A and 70B(1),(4): PDF pages 26–28. Selected powers, grounds and institutional functions; exclude penalties and procedural-code references. This older consolidation is not a complete current legal code.

• Government Taking Measures to Strengthen National Preparedness Against Cybersecurity Threats ↗

  Opening two paragraphs; preparedness list i, ii, vi and vii; cooperation list iv. Read the March 2025 institutional account, excluding counts, minister identity and any inference of demonstrated effectiveness.

• International humanitarian law and cyber operations during armed conflicts: ICRC position paper ↗

  Executive summary; sections I–II, opening of III and VI: PDF pages 2–4 and 8–9. Study effects, armed-conflict scope, attribution and state responsibility. The ICRC position does not settle every contested interpretation or cover all peacetime cyber law.

• The right to privacy in the digital age: A/HRC/39/29 ↗

  Paragraphs 6, 10, 18–22 and 34–40: PDF pages 3–4, 6–7 and 10–12. Read metadata, encryption and investigation safeguards as international human-rights analysis; not an Indian statutory procedure manual.