“We are looking at a build-operate-transfer model where the company which undertakes the work will be asked to complete the work in approximately 12-15 months from now,” the official said.
These cybersecurity centres will serve as the core component in managing the overall digital security of all the online properties and assets of the central government and its departments in various states, the official said.
For example, the managed service provider which will set up and run these centres will be tasked with looking into the prevailing cyber threats within cyberspace, identifying security breaches, incidents, compromises within the system, instances of unauthorised access and violations of government security policies.
“These cybersecurity centres will need to be proactive. Given the state of affairs, we can no longer afford to continue responding to incidents. Their (cybersecurity centres’) capacity will also be built to search the (government’s) digital assets for potential cybersecurity threats, both in the software as well as ICT infrastructure,” another official said.
Discover the stories of your interest
The NIC, which is the information technology arm of the government, is responsible for the operation and management of websites, computers, laptops, servers and other digital properties of the central government.
The bidder which qualifies to establish these cybersecurity centres will also need to conduct a forensic analysis of servers, computers, laptops, hard drives, mobile phones and other digital devices deployed in the central government offices and its various branches, one of the officials quoted above said.
“An attack simulation platform, a server workload protection solution as well as scanning of deep-web and dark-web will also be built under the cybersecurity centre. An artificial intelligence and machine learning model which trains on the best practices globally will also be built,” the official said.