Cyber Threat Landscape — Revision Notes

⚡ 30-Second Revision

Threat ≠ vulnerability ≠ impact.
2025: over 29.44 lakh incidents handled, reported January 2026.
Incident count ≠ unique victims or criminal cases.
70A: NCIIPC; 70B: CERT-In.
Protect, detect, respond and recover serve different functions.

2-Minute Revision

Cyber risk depends on the service, its weaknesses and the consequences of failure. Threat categories can overlap, and reported incidents require a clear unit and period. Effective policy links prevention with detection, response and recovery under distinct institutional mandates, while measuring outcomes rather than assuming every report represents the same harm.

5-Minute Revision

A department claims that a 20% rise in handled incidents proves a 20% rise in unique victims. Give two alternative explanations for the observed increase, identify the missing data and distinguish the roles of incident response and criminal investigation.

Vyyuha Quick Recall

T–V–I = Threat, Vulnerability, Impact: identify each before judging risk. P–D–R–R = Protect, Detect, Respond, Recover: prevention is one part of the response.