India is fifth most cyber-crime affected country: rpt

BANGALORE, INDIA: India stands fifth in the world wide ranking of countries affected by cyber-crime and much of the vulnerability in India is the result of widespread computer illiteracy and pirated machines, according to  new report, 'Cyber-security: The Vexed Question of Global Rules' released by  McAfee and the Security and Defence Agenda (SDA).

The report which dwells on India's IT security scenario identifies that the main challenge for India is to train and equip its law enforcement agencies and judiciary, particularly outside big cites.

ALSO READ: Phishing incidents on the rise in India

According to the report, the premium on Internet privacy in India is low, and data control therefore  tends to be neglected. This is another reason for the success of phishing and other scams.

"India is acutely aware that cyber -crime is based for its reputation as a country where foreign investors can do business and has been investing heavily in cyber -security. But it still lacks a single operator to control the Internet, telecoms and power sectors and even if CERT-in is the official coordinating authority, a multiplicity of other agencies are still involved.

ALSO READ: State of data security and privacy in banking industry

As more and more financial service companies set up their back office operations in India, the authorities know the problem of controlling cyber-cirme has to be addressed urgently. On the plus side, India has developed valuable experience in dealing with compliance regulations from around the world with the IT Amendments Act of 2008 that established strong data protection."

Other key report findings from the SDA report include the following:

·         Need to address expected shortage of cyber workforce: More than half (56 pc) of the respondents highlight a coming skills shortage.

·         Low level of preparedness for cyber attacks: China, Russia, Italy and Poland fall behind Finland, Israel, Sweden, Denmark, Estonia, France, Germany, Netherlands, UK, Spain and the United States.

·         Cybersecurity exercises are not receiving strong participation from industry: Although almost everyone believes that exercises are important, only 20 pc of those surveyed in the private sector have taken part in such exercises.

·         Risk assessment: Prioritize information protection, knowing that no one size fits all. The three key goals that need to be achieved are confidentiality, integration and availability in different doses according to the situation.