Critical Information Infrastructure

CII: — Critical Information Infrastructure. Systems vital for national security, economy, public health, safety.
IT Act 2000, Sec 70: — Legal basis for 'Protected System' affecting CII.
NCIIPC: — National Critical Information Infrastructure Protection Centre. Nodal agency for CII protection. Under NSCS. Est. 2014.
CERT-In: — Indian Computer Emergency Response Team. General cyber incident response, advisories. Coordinates with NCIIPC.
Key Sectors: — Power, Telecom, Banking, Transportation, Government.
Threats: — APTs, Ransomware (OT), Supply Chain, Insider Threat.
Vulnerabilities: — Legacy SCADA/ICS, IT-OT convergence.
Mnemonics:

- POWER-BANK-TELECOM: Key CII sectors (Power, Banking, Telecom, Transportation, Government). - NCIIPC-CERT-LEGAL: NCIIPC (nodal), CERT-In (coordination), LEGAL (IT Act Sec 70).

VYYUHA QUICK RECALL MNEMONICS

1
POWER-BANK-TELECOM (P-B-T):

* Power & Energy * Banking & Financial Services * Telecommunications * (Extend to include Transportation and Government Networks for a more complete list of key CII sectors. Think 'P-B-T-T-G' for a comprehensive recall of major CII sectors.) * How to use: This mnemonic helps you quickly recall the primary sectors that constitute Critical Information Infrastructure in India, crucial for both Prelims and Mains questions asking for examples or sectoral analysis.

1
NCIIPC-CERT-LEGAL (N-C-L):

* NCIIPC: The National Critical Information Infrastructure Protection Centre (the nodal agency). * CERT-In: The Indian Computer Emergency Response Team (the coordinating agency for broader cyber security).

* LEGAL: The Information Technology Act, 2000 (especially Section 70, 70A, 70B) (the foundational legal framework). * How to use: This mnemonic helps you remember the three core pillars of India's institutional and legal framework for CII protection, essential for questions on governance, roles, and legal provisions.