Internal Security — Threats, Cyber Security & Border Management

Overview

Internal security encompasses all threats to the territorial integrity, sovereignty, and public order of India that originate within or across its borders but are managed by internal security forces (as distinguished from external defence handled by the armed forces).

India faces a complex internal security environment shaped by its geography, diversity, porous borders, and rapid digitalisation.

Internal Security Challenges

A. Terrorism

B. Left Wing Extremism (LWE) / Naxalism

Origin: The Naxal movement traces its origin to the 1967 peasant uprising in Naxalbari, West Bengal.

Government Strategy:

• Security approach — CRPF/COBRA deployment, area domination
• Development approach — road connectivity, mobile towers, banking access
• Rights-based approach — Forest Rights Act implementation, tribal welfare

C. Insurgency in North-East India

Root Causes: Ethnic identity assertion, perceived neglect by mainland India, porous Myanmar border, demand for autonomy/sovereignty.

Remember: The 1986 Mizo Accord is considered the most successful peace accord in India's history -- Mizoram has been peaceful since. Know the key accords: Mizo Accord (1986), Naga Peace Accord framework (2015, still unresolved), Assam Accord (1985), Bodo Accord (2020). For Mains, contrast the Mizo success (statehood + genuine autonomy) with the prolonged Naga issue (sovereignty demand vs. territorial integrity) to show analytical depth.

Cyber Security

Institutional Framework

Information Technology Act, 2000

The IT Act 2000 is India's primary legislation dealing with cybercrime and electronic commerce. It was passed on 9 May 2000 and came into force on 17 October 2000. The Act was significantly amended in 2008.

Key distinction: Section 66A (criminalising "offensive" online content) was struck down by the Supreme Court in Shreya Singhal v. Union of India (2015) as violating Article 19(1)(a). However, Section 69A (power to block websites for national security) remains valid. Students often confuse these two sections. Section 66F (cyber terrorism) carries punishment up to life imprisonment -- the harshest penalty under the IT Act.

Digital Personal Data Protection Act, 2023

The DPDP Act received Presidential assent on 11 August 2023 — India's first comprehensive data protection law.

Major Cyber Threats to India

Border Management

India's Borders at a Glance

Key Border Guarding Forces

Smart Fencing and Technology

Money Laundering

Prevention of Money Laundering Act (PMLA), 2002

The PMLA was enacted in January 2003 and came into force on 1 July 2005.

FATF (Financial Action Task Force)

Exam Tip: FATF's Grey List (officially "Jurisdictions Under Increased Monitoring") is NOT the same as the Black List ("High-Risk Jurisdictions Subject to a Call for Action"). Pakistan was on the Grey List from 2018 to 2022. Being grey-listed affects a country's credit ratings, foreign investment, and international banking relations. India, as a full FATF member since 2010, participates in evaluating other countries -- a fact useful for Mains answers on India's role in global financial governance.

Organised Crime

Role of Media & Social Media in Security

Government Measures

• IT Act Section 69A — power to block online content threatening national security
• IT Rules, 2021 — intermediary guidelines requiring traceability and content moderation
• Social media monitoring cells by state police and intelligence agencies
• Fact-checking units to counter disinformation

Security Forces and Their Mandate

Important for UPSC

Prelims Focus

• CERT-In establishment (2004), parent ministry (MeitY)
• IT Act 2000 — key sections (66, 66F, 69A)
• DPDP Act, 2023 — date, penalties, scope
• FATF — establishment (1989), headquarters (Paris), members (40)
• PMLA, 2002 — enacted January 2003, enforced 1 July 2005
• BSF (1965), ITBP (1962), Assam Rifles (1835), NDRF (2006)
• Naxal movement origin — Naxalbari, 1967

Mains Dimensions

• Linkages between terrorism, organised crime, and money laundering — how PMLA and FATF address the financing chain
• Cyber security as the fifth domain of warfare — need for cyber doctrine, critical infrastructure protection
• Border management challenges — technology vs manpower, riverine borders, Free Movement Regime
• LWE — security vs development debate — is the decline sustainable without addressing root causes?
• Social media regulation — balancing national security with freedom of expression

Interview Angles

• "How would you handle fake news spreading communal tension in your district?"
• "Should India have a dedicated cyber command?"
• "What is the biggest internal security challenge India faces today?"
• "How can technology improve border management?"

Recent Developments (2024–2026)

New Criminal Laws — BNS, BNSS, BSA Implemented (July 2024)

Three landmark criminal laws came into force on 1 July 2024, replacing colonial-era statutes: the Bharatiya Nyaya Sanhita (BNS) replaced the Indian Penal Code 1860; the Bharatiya Nagarik Suraksha Sanhita (BNSS) replaced the Code of Criminal Procedure 1973; and the Bharatiya Sakshya Adhiniyam (BSA) replaced the Indian Evidence Act 1872. These represent the most comprehensive reform of India's criminal justice system since independence.

Key changes relevant to internal security: police custody extended from 15 to 90 days for serious offences (BNSS); forensic investigation made mandatory for offences punishable by 7+ years imprisonment; e-FIRs enabled online; "organised crime" and "terrorist activity" defined for the first time in the BNS; community service introduced as punishment for minor offences. By October 2024, over 3.9 lakh officials had completed training on the new laws.

UPSC angle: BNS-BNSS-BSA (effective 1 July 2024) — laws they replaced, key changes (police custody, forensic investigation, e-FIR, organised crime definition) — are certain Prelims facts and important Mains topic for GS-III internal security and GS-II governance.

Pahalgam Terror Attack and Operation Sindoor (April–May 2025)

The Pahalgam attack (22 April 2025, 26 killed at Baisaran Valley, Anantnag) and India's subsequent Operation Sindoor (6–7 May 2025, precision strikes on 9 terrorist camps in Pakistan and PoJK) represent the most significant internal security-linked external operation since the 2019 Balakot airstrike. India's response involved: NIA investigation into the attack, suspension of the Indus Waters Treaty, mass expulsion of Pakistani nationals, and a 4-day military confrontation ending with a ceasefire on 10 May 2025.

The Pahalgam attack demonstrated the continuing threat of Pakistan-sponsored proxy terrorism targeting India's civilian population, particularly Hindu pilgrims, in a calculated attempt to destabilise the post-Article 370 normalisation of Jammu and Kashmir.

UPSC angle: Pahalgam attack (22 April 2025, Baisaran Valley, Anantnag, 26 killed, TRF/Lashkar-e-Taiba), Operation Sindoor (6–7 May 2025), and the doctrinal shift from "strategic restraint" to "punitive response" are the most critical internal-security-linked current affairs for UPSC 2025–26.

Operation Sindoor — Security Doctrine and Intelligence Lessons (May–July 2025)

India's Operation Sindoor established a new security doctrine articulated by PM Modi: (i) any terrorist attack on Indian soil will receive assured and proportionate retaliation; (ii) India will not be deterred by nuclear blackmail in striking cross-border terrorist infrastructure. Nine terrorist camps — belonging to JeM (Jaish-e-Mohammed, Bahawalpur) and LeT (Lashkar-e-Taiba, Muridke) — were struck using loitering munitions and air-launched missiles, representing India's deepest cross-border strikes since 1971.

Intelligence lessons: The attack exposed gaps in human intelligence (HUMINT) coverage in Pahalgam's tourist areas — three attackers entered via forest routes undetected. Post-attack, security forces detained over 2,000 individuals including former militants and Over-Ground Workers (OGWs) for questioning. The NIA deployed digital forensics (devices recovered from the Pahalgam attackers), leading to identification of Pakistan-based LeT commanders (Hafeez Saeed and Saifullah Khalid Kasuri) as masterminds. India subsequently launched Operation Mahadev (July 2025) to target high-ranking TRF/LeT operatives involved in the Pahalgam attack network.

The conflict also exposed cyber-security vulnerabilities: APT36 (Pakistan-linked) conducted simultaneous cyberattacks on government, defence, and media networks during the kinetic operation, demonstrating the hybrid nature of modern conflict.

UPSC angle: Prelims — Operation Sindoor: 6–7 May 2025; 9 camps struck; JeM (Bahawalpur) + LeT (Muridke) targets; ceasefire 10 May 2025; Operation Mahadev (July 2025). Mains (GS3) — India's new counterterrorism doctrine (assured retaliation, nuclear deterrence challenge); intelligence-operations nexus; hybrid warfare (kinetic + cyber); NIA investigation architecture; Pahalgam as proxy war demonstration.

LWE — Significant Decline; March 2026 Target (2024–2025)

Left Wing Extremism (Naxalism) saw continued significant decline. In 2024, 290 Naxalites were neutralised, 1,090 arrested, and 881 surrendered across India. Among those neutralised were 18 top leaders including Politburo/Central Committee members. The total number of LWE-affected districts reduced from 126 (2010) to 38 (April 2024), with only 6 "most affected" districts remaining (4 in Chhattisgarh, 1 each in Jharkhand and Maharashtra).

The CPI (Maoist) General Secretary was killed in security force operations in 2024 — a major blow to the insurgent command structure. The MHA targeted a "Naxal-free Bharat" by March 2026. The 165% rise in Naxal surrenders between 2024 and 2025 was cited as evidence of the insurgency entering its terminal phase.

UPSC angle: LWE 2024 data (290 neutralised, 1,090 arrested, 881 surrendered, 38 affected districts), "Naxal-free Bharat by March 2026" target, and General Secretary killed in 2024 — are critical Prelims facts and Mains data points for GS-III internal security.

Cyber Incidents — CERT-In Reports 2.04 Million Incidents (2024)

India registered over 2.04 million cybersecurity incidents in 2024, up from 1.39 million in 2023, according to CERT-In. The WazirX cryptocurrency exchange hack (USD 230 million stolen) was the largest single cyber theft in India's history. The CrowdStrike/Microsoft global IT outage (19 July 2024) was classified as "critical" by CERT-In. Pakistan-linked hacker group "Transparent Tribe" targeted India's defence and aerospace sectors. India saw a 261% increase in cyberattacks in Q1 2024 compared to the previous year.

UPSC angle: CERT-In 2024 statistics (2.04 million incidents), WazirX hack (USD 230 million), Transparent Tribe (Pakistan-linked, defence sector targeting), and CrowdStrike outage are important current affairs for GS-III cyber security.

Vocabulary

Insurgency

• Pronunciation: /ɪnˈsɜːrdʒənsi/
• Definition: An organised armed revolt against an established government or authority, typically carried out by non-state actors who are not recognised as belligerents, falling short of a full-scale revolution.
• Origin: From Latin insurgere ("to rise up against"), combining in- ("against") + surgere ("to rise"); the noun form entered English in 1798 from insurgent + -cy; in the Indian context, it is most commonly associated with separatist movements in North-East India.

Extremism

• Pronunciation: /ɪkˈstriːmɪzəm/
• Definition: The holding of radical political, religious, or ideological views that reject compromise and advocate for drastic, often violent, measures to achieve objectives.
• Origin: From Latin extremus ("outermost, utmost") + -ism; first recorded in English in the 1840s; in Indian security discourse, it encompasses both Left Wing Extremism (Naxalism/Maoism) and right-wing or religiously motivated extremism.

Radicalization

• Pronunciation: /ˌrædɪkəlaɪˈzeɪʃən/
• Definition: The process by which an individual or group adopts increasingly extreme political, religious, or ideological positions, often to the point of justifying or engaging in violence.
• Origin: From Latin radicalis ("of or having roots"), from radix ("root") + -ization; the root sense is "going to the fundamental cause" — hence "thoroughgoing, extreme"; in contemporary security studies, it refers particularly to online and offline processes that drive individuals toward terrorist ideologies.

Key Terms

Left Wing Extremism

• Pronunciation: /lɛft wɪŋ ɪkˈstriːmɪzəm/
• Definition: An armed insurgency rooted in Maoist ideology that seeks to overthrow the democratic Indian state through a "protracted people's war," exploiting socio-economic grievances — landlessness, forest rights violations, displacement, and governance deficits — of tribal and marginalised communities, primarily in the forested and mineral-rich districts of the Red Corridor spanning Chhattisgarh, Jharkhand, Odisha, Maharashtra, and neighbouring states. The CPI(Maoist), formed in September 2004 through the merger of the People's War Group (PWG) and the Maoist Communist Centre of India (MCC), is its principal organisation, designated as a terrorist outfit under the Unlawful Activities Prevention Act.
• Context: The movement traces its origin to the 25 May 1967 peasant uprising in Naxalbari village, Darjeeling district, West Bengal, led by Charu Majumdar, Kanu Sanyal, and Jangal Santhal — hence the term "Naxalism." The CPI(ML) was formed in 1969, and various splinter groups eventually coalesced into the CPI(Maoist) in 2004. At its peak in the late 2000s, LWE affected nearly 180 districts across 10 states. Through the government's two-pronged strategy — security operations (SAMADHAN doctrine 2017, Operation Kagaar) and development interventions (Aspirational Districts Programme, road and mobile connectivity) — affected districts have shrunk dramatically. By April 2025, Home Minister Amit Shah declared only 6 "most-affected" districts remained, with armed cadre strength falling from over 2,000 in 2024 to approximately 220 by early 2026. Between 2004 and November 2025, 8,956 people were killed in LWE violence.
• UPSC Relevance: GS3 Internal Security — one of the most frequently tested topics. Prelims tests Naxalbari (1967), CPI(ML) formation (1969), CPI(Maoist) formation (2004), SAMADHAN doctrine (2017), affected districts decline (180 to under 12), and Operation Kagaar. Mains asks "Is LWE a law-and-order problem or a socio-economic one?" and "Evaluate the government's two-pronged strategy (security + development)." Always present both dimensions for a balanced answer — security creates the enabling environment; development addresses root causes (forest rights, tribal welfare, governance deficits).

AFSPA

• Pronunciation: /eɪ.ɛf.ɛs.piː.eɪ/
• Definition: The Armed Forces (Special Powers) Act, 1958, is a parliamentary act that grants extraordinary powers to the Indian Armed Forces in areas officially declared as "disturbed" by the Central or State Government — including the authority to fire upon persons acting in contravention of prohibitory orders, search premises without warrant, arrest without warrant on reasonable suspicion, and destroy arms dumps or fortified positions. Personnel acting under the Act are protected from prosecution except with prior sanction of the Central Government.
• Context: Modelled on the Armed Forces Special Powers Ordinance promulgated by the British colonial government on 15 August 1942 to suppress the Quit India movement; the post-independence Act was passed on 11 September 1958, initially to address Naga insurgency in the North-Eastern states. A separate AFSPA was enacted for Jammu & Kashmir in 1990. On 19 November 2004, the Central Government appointed a five-member committee headed by Justice B.P. Jeevan Reddy to review the Act, which recommended its complete repeal and incorporation of relevant provisions into the Unlawful Activities (Prevention) Act, 1967. The government did not accept the repeal recommendation. Since 2022, AFSPA has been progressively withdrawn: completely from Tripura (2015) and Meghalaya (2018); partially from Assam (all except 4 districts), Nagaland (8 districts), Manipur (19 police station areas reduced), and Arunachal Pradesh (limited areas).
• UPSC Relevance: GS3 Internal Security — Mains frequently asks "Is AFSPA a necessary evil or a human rights violation?" requiring a balanced answer citing the Jeevan Reddy Committee (2005, recommended repeal), the EEVFAM Supreme Court ruling (fake encounters accountability), and Irom Sharmila's 16-year hunger strike (2000-2016). Prelims tests the year (1958), "disturbed area" declaration mechanism (Section 3), and the Jeevan Reddy Committee recommendation. The phased AFSPA withdrawal from NE states (2022 onwards) is a current affairs dimension demonstrating the government's effort to normalise security conditions while retaining the Act in areas with active insurgency.

Current Affairs Connect

Sources: Ministry of Home Affairs — LWE Division (mha.gov.in); PIB Press Releases on LWE and border management; CERT-In (cert-in.org.in); NDMA (ndma.gov.in); FATF (fatf-gafi.org); IT Act 2000 (indiacode.nic.in); DPDP Act 2023 (meity.gov.in).