Maarg Manthan · Topic 14.18

National Cyber Coordination Centre

Science & Technology › IT, Telecommunications and Computers · Topic 14.18

The National Cyber Coordination Centre, NCCC, is an Indian Government facility under the Ministry of Electronics and Information Technology, set up as part of the National Cyber Security Policy of 2013, to give a real-time picture of cyber threats to the country. It collects and examines metadata, which is information about internet traffic such as where it comes from and goes to, but not the content, to find signs of attacks and then alerts the agencies concerned. It works under CERT-In and is meant to help different bodies share information, since cyber security in India is spread across several agencies. The first phase of the NCCC became operational around 2017, and it is linked with other bodies such as the National Critical Information Infrastructure Protection Centre.

5 min read · UPSC Prelims · Science & Technology · IT, Telecommunications and Computers

At a Glance

Ministry MeitY
Policy base National Cyber Security Policy, 2013
Data used Metadata
Works with CERT-In, NCIIPC
Aim Real-time threat picture
Exam link UPSC Prelims, Science & Technology: IT, Telecommunications and Computers

Where Does It Fit?

This topic follows the account of encryption and cybersecurity. It covers the coordination body that brings together information on threats, and it sets out the wider structure of cyber agencies in India. Previous topic: Encryption and Cybersecurity (Cyber Swachhta Kendra). Next topic: Computer Languages and Generations of Computers.

What Is the NCCC and What Does It Do?

Aspect	Details
Origin	Conceived under the National Cyber Security Policy, 2013, and approved by the Government around 2013 and 2014 with a plan for a facility in Delhi
Function	Scans internet traffic metadata, collected from internet service providers, to spot suspicious activity, malware and attacks in real time
Coordination	Shares threat alerts with agencies such as CERT-In, NCIIPC, the armed forces, intelligence agencies and ministries
Metadata	Data about data, for example source, destination, time and size of traffic. Not the content of messages
Oversight	Concerns about surveillance led to calls for legal safeguards and parliamentary oversight
Status	The first phase became operational in 2017. The extent of its coverage should be checked from official sources
Relation to CERT-In	Works as part of CERT-In and under MeitY

Which Other Cyber Agencies Exist?

CERT-In: the national agency for responding to cyber incidents since 2004
NCIIPC: protects critical information infrastructure, set up in 2014 under NTRO under Section 70A of the IT Act
National Cyber Security Coordinator: an office in the National Security Council Secretariat that coordinates cyber security at the national level
Indian Cyber Crime Coordination Centre: I4C, under the Ministry of Home Affairs since 2018, to deal with cyber crime, with the cybercrime reporting portal
Defence Cyber Agency: a tri-service agency created in 2019 for military cyber operations
Defence Information Assurance and Research Agency: earlier body for defence information security
NTRO: National Technical Research Organisation, a technical intelligence agency
State cyber cells: police units for cyber crime investigation

What Else Should You Remember?

National Cyber Security Policy, 2013: aimed to protect information, build a secure ecosystem, create a workforce of 5 lakh cyber security professionals and set up a national nodal agency
Cyber Surakshit Bharat: a 2018 initiative to increase awareness and capacity of government officers
National Cyber Security Strategy: a comprehensive strategy was being drafted as a successor to the 2013 policy. Check the current status
Critical infrastructure: sectors such as power grids, banks, telecom and railways are protected by sector-specific teams
Cyber attacks on India: incidents such as the ransomware attack on AIIMS Delhi in November 2022 show the need for stronger security in hospitals and government
International cooperation: India works with partners through the Quad and bilateral cyber dialogues
Budapest Convention: India is not a party
United Nations: India supports a UN framework for responsible state behaviour in cyberspace
Digital India link: the NCCC supports trust in Digital India Initiative and E-Governance Programmes
Privacy debate: the Puttaswamy judgment requires legality, necessity and proportionality for surveillance, as in Cyber Law in India
Skills: shortage of trained cyber security staff is a major gap
Caution: agency structures are evolving, so confirm the latest details
Critical sectors: the 2013 policy listed power, banking, telecom, transport and e-governance as sectors that need special protection
Incident response teams: sector CERTs for power, finance and defence work with CERT-In
Cyber drills: CERT-In and others run exercises with banks, power companies and government to test response to simulated attacks
Public awareness: campaigns teach citizens about phishing, passwords and safe use of online services

Why Does It Matter for the Exam?

Purpose: real-time threat picture
Data type: metadata
Agencies: CERT-In, NCIIPC, I4C, DCyA
Current affairs link: new cyber strategy and attacks
Common errors: saying the NCCC reads message content or sits under the Home Ministry

As an analytical point, cyber defence needs one view of threats and clear roles for each agency. Legal safeguards for privacy and independent oversight are needed to keep public trust in a monitoring system like the NCCC.

Why Is This Topic Important?

NCCC Purpose and data
Agencies Who does what
Privacy Oversight

What Came Next?

The next topic covers computer languages and the generations of languages. Next topic: Computer Languages and Generations of Computers.

Key People and Terms

NCCC National Cyber Coordination Centre
Metadata Data about data
NCIIPC Critical infrastructure centre
I4C Cyber crime coordination centre
DCyA Defence Cyber Agency
NTRO National Technical Research Organisation

Exam Corner

Points to Remember

NCCC is under MeitY.
Policy base: 2013.
NCIIPC: 2014; I4C: 2018; DCyA: 2019.
NCCC uses metadata, not content.
AIIMS Delhi ransomware: November 2022.

Do Not Confuse With

NCCC and NCIIPC General threat picture versus critical infrastructure protection
I4C and CERT-In Crime coordination under MHA versus incident response under MeitY
Metadata and content Traffic details versus the message itself

Memory Hook

NCCC watches metadata, CERT-In responds, NCIIPC guards the grid, I4C fights the crime.

Mains Angle

Questions ask for purpose, ministry and related agencies. These points help.

Need Fragmented structure
Role NCCC
Risk Surveillance

A Question You May Face

An original practice question, not a past paper question.

“Discuss the role of the National Cyber Coordination Centre in India’s cyber security architecture and the privacy concerns it raises.”

How to Answer

Need Many agencies.
NCCC Metadata scan.
Other bodies NCIIPC, I4C.
Privacy Safeguards.

GS Relevance

Prelims: purpose, ministry, metadata, related agencies. GS Paper 3: cyber security, internal security; GS Paper 2: institutions.

Frequently Asked Questions

What is the National Cyber Coordination Centre?

The National Cyber Coordination Centre is an Indian Government facility under the Ministry of Electronics and Information Technology that monitors internet traffic metadata to detect cyber threats in real time. It shares alerts with CERT-In, the armed forces and other agencies, as part of the National Cyber Security Policy of 2013.

What kind of data does the NCCC scan?

The NCCC scans metadata, which is information about internet traffic such as its source, destination, time and volume, but not the content of messages. By studying patterns in this metadata, it looks for signs of malware, attacks and suspicious activity. Critics asked for legal safeguards to prevent misuse of such monitoring for surveillance.

What is NCIIPC?

The National Critical Information Infrastructure Protection Centre was set up in 2014 under the National Technical Research Organisation to protect India's critical information infrastructure, the systems whose failure would hurt national security, the economy or public health, such as power grids, banks and telecom networks. Its power comes from Section 70A of the Information Technology Act.

What is the Indian Cyber Crime Coordination Centre?

The Indian Cyber Crime Coordination Centre, I4C, is a body of the Ministry of Home Affairs set up in 2018 to coordinate action by states and central agencies against cyber crime. It runs the national cybercrime reporting portal, helps in investigation and training, and works on cyber forensics.

Which agency is the national nodal agency for cyber incidents in India?

CERT-In, the Indian Computer Emergency Response Team under the Ministry of Electronics and Information Technology, is the national nodal agency for cyber security incidents. It issues alerts and advisories, coordinates the response to attacks, and under 2022 directions requires organisations to report incidents within six hours.

PYQ Practice — Statement Analysis

1 The National Cyber Coordination Centre functions under the Ministry of Electronics and Information Technology.

True

Linked with CERT-In.

2 The NCCC reads the content of private messages.

False

It scans metadata.

3 NCIIPC was set up in 2014 under NTRO.