Internal Security, Cyber Security and Border Management
External State and Non-State Actors
The distinction the syllabus draws is worth preserving in your answer. A state actor uses the machinery of a government — intelligence agencies, safe havens, training and finance — while retaining deniability. A non-state actor is a group without formal state authority: a terrorist organisation, an insurgent front, a criminal syndicate, a hacktivist collective. The two are usually fused rather than separate, and that fusion is the analytical point: a state sponsor supplies capability and sanctuary while the non-state group supplies deniability, so the sponsoring state gains the effects of force without incurring the responsibility for war. Recognising this explains why India frames cross-border terrorism as a state-sponsorship problem rather than only a policing problem, and why it pursues instruments like FATF listing and diplomatic isolation alongside military options.
Cyber Security, Communication Networks and Social Media
| Term | What it means |
|---|---|
| The CIA triad | Confidentiality (only authorised access), Integrity (data not altered), Availability (systems usable when needed). Every attack targets one of the three |
| Malware, ransomware | Malicious software; ransomware encrypts data and demands payment — the dominant threat to hospitals and utilities |
| Phishing, social engineering | Deceiving a human into surrendering credentials — the entry point for most breaches, which is why awareness matters as much as firewalls |
| DDoS | Flooding a service until it is unavailable — an attack on availability, not on data |
| APT — advanced persistent threat | A long-term, stealthy intrusion, typically state-linked, aimed at espionage or pre-positioning in critical infrastructure |
| Critical information infrastructure | Systems whose incapacitation would have a debilitating national impact — power, banking, telecom, transport, health. Protected by NCIIPC under the IT Act |
- India’s institutional architecture: the IT Act, 2000 with Section 66F on cyber terrorism and Section 69 on interception; CERT-In as the national incident-response agency with mandatory breach reporting; NCIIPC for critical infrastructure; the National Cyber Security Policy, 2013; the Indian Cyber Crime Coordination Centre (I4C) and the National Cyber Crime Reporting Portal; the Digital Personal Data Protection Act, 2023; and the CERT-In and RBI directions that require regulated entities to report incidents within fixed timelines.
- Why cyber attribution is hard, and why that matters. Attacks route through compromised machines in third countries, tools are shared and sold, and false flags are cheap — so the certainty required for a legal or military response is rarely available quickly. That is the honest reason deterrence works poorly in this domain and why resilience — backups, segmentation, recovery drills — is a better investment than the promise of retaliation.
- Social media and the media’s role. Radicalisation now happens through encrypted groups and recommendation algorithms rather than physical camps; rumour propagates faster than verification and has triggered lynchings and communal riots; deepfakes make evidentiary standards harder. The instruments available are intermediary due-diligence and grievance-officer obligations under the IT Rules, traceability demands that collide with end-to-end encryption, fact-check units, and internet shutdowns — the last constrained by Anuradha Bhasin, which held that shutdown orders must be published, reasoned and periodically reviewed, since an indefinite shutdown is disproportionate.
Money Laundering and Terror Financing
Money laundering has three classic stages and naming them is the fastest way to structure an answer. Placement introduces criminal proceeds into the financial system — cash deposits broken into small amounts, casinos, cash-intensive businesses. Layering moves the money through complex transfers, shell companies, trade mis-invoicing and jurisdictions with weak disclosure so the trail is broken. Integration returns it as apparently legitimate wealth — property, jewellery, business investment, film financing. Hawala deserves specific mention because it needs no funds to cross a border at all: value is settled between brokers by offsetting instructions, which is exactly why it leaves almost no banking footprint and remains a channel for terror finance.
- Legal machinery: the Prevention of Money Laundering Act, 2002 (PMLA) with attachment and confiscation of proceeds of crime, enforced by the Enforcement Directorate; the Financial Intelligence Unit (FIU-IND) receiving suspicious transaction reports; the UAPA for designating terrorist organisations and, after the 2019 amendment, individuals; the Benami Transactions (Prohibition) Amendment Act, 2016; and FEMA for foreign-exchange contraventions.
- International machinery: the Financial Action Task Force (FATF), which sets standards and maintains the grey and black lists. Its leverage is reputational and financial rather than coercive — listing raises the cost of correspondent banking and deters investment, which is why FATF pressure has produced more verifiable action on terror financing than most bilateral demands.
- New channels worth naming: crypto-assets and mixers, prepaid instruments, misuse of non-profit organisations, trade-based laundering through over- and under-invoicing, and counterfeit currency. Note the balance an examiner rewards — enforcement powers under PMLA are wide, and concerns about their proportionate use and about bail conditions are legitimate; a good answer acknowledges both the necessity and the safeguards.
Border Management, Organised Crime, and Who Guards What
| Force | Border or mandate |
|---|---|
| BSF — Border Security Force | India–Pakistan and India–Bangladesh borders |
| ITBP — Indo-Tibetan Border Police | India–China border |
| Assam Rifles | India–Myanmar border and counter-insurgency in the Northeast |
| SSB — Sashastra Seema Bal | India–Nepal and India–Bhutan open borders |
| CRPF | Internal security and counter-insurgency, including anti-Naxal operations |
| CISF, NSG, NIA, Coast Guard | Industrial and airport security; counter-terror and hostage rescue; investigation of terror offences; maritime law enforcement in territorial waters and the EEZ |
Border management is a wider idea than border guarding, and the syllabus wording invites that distinction. India’s borders present four different problems: terrain — glaciated heights on the LAC, riverine and shifting char land in the Sunderbans and along the Brahmaputra, dense forest on the Myanmar frontier, and desert in Rajasthan, so no single fencing model works; undemarcated stretches, especially the LAC, where differing perceptions of the line themselves generate standoffs; open borders with Nepal and Bhutan, which are a treaty asset for people-to-people movement but a smuggling and infiltration liability; and local livelihood dependence on cross-border trade, which means aggressive enforcement without alternative livelihoods converts border residents into a hostile population. Hence policy combines fencing, floodlighting and technology under the Comprehensive Integrated Border Management System with the Border Area Development Programme and the Vibrant Villages Programme — infrastructure and settlement retention so that the border is populated by citizens with a stake in it.
Key takeaways
- Poverty alone does not cause insurgency — the operative variable is the governance deficit: land alienation and displacement without rehabilitation, denial of forest rights, the state absent in service delivery but present coercively, and no remedy from the ordinary justice system.
- Clear → hold → develop, in that order. Development first fails because assets are destroyed or taxed; force alone fails because it produces grievance faster than security. Proportionality is a security requirement, not only a moral one — civilian casualties are the other side’s best recruitment tool.
- The Northeast is about identity and autonomy, not class grievance — political accommodation worked (statehood, Sixth Schedule councils, the Mizo Accord of 1986, the most successful Indian insurgency settlement). AFSPA: the Jeevan Reddy Committee (2005) recommended repeal with powers transferred to an amended UAPA; phased area-wise withdrawal has proved workable.
- State and non-state actors are usually fused, not separate: the sponsor supplies capability and sanctuary, the non-state group supplies deniability — so the sponsor gains the effects of force without the responsibility for war.
- Cyber basics: the CIA triad (confidentiality, integrity, availability) — every attack targets one. Know malware/ransomware, phishing and social engineering (the entry point for most breaches), DDoS (attacks availability), APTs (stealthy, state-linked), and critical information infrastructure under NCIIPC.
- Indian cyber architecture: IT Act 2000 (Section 66F cyber terrorism, Section 69 interception), CERT-In, NCIIPC, National Cyber Security Policy 2013, I4C, DPDP Act 2023. Attribution is genuinely hard, which is why resilience beats deterrence in this domain.
- Money laundering has three stages: placement, layering, integration. Hawala leaves almost no banking footprint because no funds cross the border — value is offset between brokers. Machinery: PMLA 2002 and the ED, FIU-IND, UAPA (individuals designable after the 2019 amendment), Benami Amendment 2016, FEMA, and FATF grey/black listing whose leverage is reputational.
- Border forces: BSF (Pakistan, Bangladesh), ITBP (China), Assam Rifles (Myanmar + Northeast counter-insurgency), SSB (Nepal, Bhutan), CRPF (internal security), CISF, NSG, NIA, Coast Guard.
- Four border problems: varied terrain (no single fencing model), undemarcated stretches (differing LAC perceptions cause standoffs), open borders with Nepal and Bhutan (treaty asset, smuggling liability), and local livelihood dependence on cross-border trade. Hence CIBMS plus the Border Area Development Programme and Vibrant Villages Programme.
- Crime and terror converge because both need routes, money and weapons — so dismantling logistics (route, financier, corrupt official) damages a group more durably than eliminating replaceable cadres. And since police and public order are State List subjects, cite Prakash Singh v. Union of India (2006): State Security Commission, two-year tenures, separation of investigation from law and order, Police Establishment Board.
Practice questions (8)
Attempt each one before opening the answer. Every explanation names the tempting wrong option as well as the right one, because that is where marks are lost.
Which is the most accurate statement of the development–extremism linkage?
Show answer
Answer: B — The operative variable is a governance deficit — displacement without rehabilitation, denial of forest rights, and a state absent in service delivery but present coercively
Many equally poor districts have no insurgency, so income level cannot be the explanation. What distinguishes affected districts is the combination of dispossession, absent services, coercive presence and no judicial remedy — which lets an armed group offer dispute settlement and protection the state has not provided.Why must "clear" precede "develop" in counter-insurgency doctrine?
Show answer
Answer: B — Because assets built without security are destroyed or taxed by the insurgent group, so development spending does not survive
The sequence is practical, not ideological: a road blown up each night is not a road. But the doctrine equally rejects option 3 — force alone produces grievance faster than security, which is why "hold" and "develop" are integral and why proportionality is treated as a security requirement.Which force guards the India–China border?
Show answer
Answer: B — ITBP
ITBP guards the India–China border. BSF covers Pakistan and Bangladesh, SSB the open Nepal and Bhutan borders, and Assam Rifles the Myanmar border along with counter-insurgency duties in the Northeast.The three stages of money laundering, in order, are:
Show answer
Answer: B — Placement, layering, integration
Placement introduces proceeds into the financial system, layering breaks the audit trail through complex transfers and shell entities, and integration returns the money as apparently legitimate wealth. Hawala bypasses banking entirely, since value is settled between brokers by offsetting instructions and no funds cross the border.In the CIA triad of cyber security, a DDoS attack primarily targets:
Show answer
Answer: C — Availability
A distributed denial-of-service attack floods a service until legitimate users cannot reach it — data is neither stolen nor altered. Confidentiality is attacked by data theft, and integrity by tampering with records.Anuradha Bhasin v. Union of India is cited in internal-security answers for holding that:
Show answer
Answer: B — Shutdown orders must be published, reasoned and periodically reviewed, since an indefinite shutdown is disproportionate
The judgment did not prohibit shutdowns; it subjected them to the discipline of publication, recorded reasons, proportionality and periodic review. Note also that police and public order are State List subjects, which is why most internal-security reform is state-level.Consider:
(1) Organised crime and terrorism converge because both require routes, money and weapons.
(2) Therefore dismantling logistics networks is often more durable than eliminating cadres.
Which is correct?Show answer
Answer: C — Both 1 and 2
Both are correct and the second follows from the first. A smuggling network already possesses safe houses, couriers, corrupted officials and hawala settlement — exactly the infrastructure a terrorist group needs. Cadres are replaceable; routes, financiers and protection networks take years to rebuild, which is why narco-terrorism is treated as a distinct category.Prakash Singh v. Union of India (2006) directed which of the following?
Show answer
Answer: B — A State Security Commission, minimum two-year tenure for the DGP and key officers, separation of investigation from law and order, and a Police Establishment Board for transfers
These directions attack the two structural weaknesses of Indian policing — political control over postings, and investigators being diverted to law-and-order duty. Compliance across states has been partial, which is itself a citable point. AFSPA repeal was the Jeevan Reddy Committee’s recommendation, not this judgment.