Critical Infrastructure Protection — Revision Notes

⚡ 30-Second Revision

Checked 18 October 2026.
IT Act 70A: NCIIPC and critical information infrastructure. 70B: CERT-In incident response.
NIST CSF 2.0 dates to 2024.
Criticality follows consequences; duplicate systems can share one failure source.

2-Minute Revision

Map essential functions and their digital, physical and supplier dependencies. Assess confidentiality, integrity and availability through service consequences. Prevention needs response and recovery behind it. Check whether redundancy is genuinely independent, whether fallback is safe and whether restoration is exercised. Preserve the distinction between Indian statutory roles and international guidance.

5-Minute Revision

Map a hypothetical hospital service to power, network, identity and records dependencies. Identify one common-mode failure affecting two nominally redundant systems. Assign incident response and critical-infrastructure coordination to the relevant institutional roles. Propose an exercise that tests safe restoration rather than the mere existence of backups.

Vyyuha Quick Recall

CRISP: Consequences define criticality; Roles stay distinct; Independence of backups; Safe fallback; Practised recovery.