Government Strengthens Cyber Resilience Against AI-Enabled Cyber Threats through AI-Driven - 30th July 2026 - Ministry of Electronics and Information Technology - Gazette Notification PDF
Read or download the official PDF of this gazette notification issued by the Ministry of Electronics and Information Technology on 30th July 2026. Classified under Press Release.
Executive Summary
This report outlines the Indian Government’s strategic measures to mitigate AI-enabled cyber threats through AI-driven detection, vulnerability assessments, and threat intelligence. It details the completion of 10 specialized cyber security exercises by CERT-In during June–July 2026 and introduces critical regulatory requirements for technology providers. Key mandates include the June 2026 guidelines for OEMs to implement AI-accelerated vulnerability protection and continuous monitoring frameworks.
Key Points / Main Content
Operational Measures and Threat Detection
Deployment of AI-driven situational awareness systems to identify and mitigate malicious domains and phishing activities.
Extension of AI-enabled vulnerability assessments for public-facing digital assets within sandbox environments.
Operation of an automated cyber threat intelligence exchange platform providing tailored alerts across multiple sectors.
Capacity Building and Training
Conducted 10 "Building Resilience against Frontier AI-driven Cyber Threats" exercises involving 1,470 participants from 345 organizations in mid-2026.
Launch of the Certified Security Professional in Artificial Intelligence (CSPAI) program (September 2024) to equip professionals with skills to secure AI systems.
Ongoing collaboration with industry partners to upskill the cyber security workforce in government and private sectors.
Regulatory Guidelines and Frameworks
OEM Requirements (June 2026): Mandates that Original Equipment Manufacturers and technology providers implement AI-assisted security testing, patch management, and incident response.
Digital Infrastructure (May 2026): Issued a blueprint for reducing exposure and defending against AI-assisted vulnerability exploitation.
Supply Chain Transparency (July 2025): Technical guidelines for Bill of Materials (BOM) covering software, hardware, AI, and Quantum Computing.
Smart Cities (February 2025): Guidelines for the secure usage of AI and Machine Learning in smart city infrastructure.
Public Advisories on Emerging Threats
Guidance on protecting against deepfake threats (November 2024) and adversarial threats arising from AI applications (May 2023).
Best practices for the effective and responsible use of Generative AI solutions (March 2025).
Whitepaper on mitigating API attacks using AI (August 2023).
Impact Analysis
Government and Private Sector Organizations (Power, Telecom, BFSI, etc.)Impact: These sectors are now integrated into a proactive threat mitigation network through automated intelligence sharing and participation in large-scale resilience drills.
Action Required: Organizations must integrate CERT-In’s tailored alerts into their security operations and ensure staff participate in ongoing upskilling and training programs.
Original Equipment Manufacturers (OEMs) and Technology ProvidersImpact: Subject to strict new compliance requirements regarding the development and maintenance of digital assets.
Action Required: Must implement AI-accelerated vulnerability protection, continuous monitoring, and AI-assisted security testing as per the June 2026 guidelines.
Cybersecurity ProfessionalsImpact: Increased availability of specialized, accredited certification pathways (like CSPAI) to address the shift toward AI-driven threat landscapes.
Action Required: Professionals should seek certification and training to align their skills with ANSI/ANAB approved standards for securing AI systems.
MSMEs and IndividualsImpact: Enhanced protection through targeted advisories on frontier AI risks and deepfake threats.
Action Required: Follow established best practices for Generative AI and implement recommended measures to minimize exposure to adversarial AI-based applications.
Key Entities Referenced
Indian Computer Emergency Response Team (CERT-In): The national nodal agency for cybersecurity incident response that implements AI-driven detection systems, vulnerability assessments, and security drills.
Ministry of Electronics & IT: The primary ministry responsible for the implementation of policy measures to address AI-enabled cyber threats and enhance national cyber resilience.
Certified Security Professional in Artificial Intelligence (CSPAI): A specialized certification program launched to equip cybersecurity professionals with skills to secure AI systems and address AI-related threats.
Blueprint for Reducing Exposure and Defending against AI-Assisted Vulnerabilities Exploitation in Digital Infrastructure: A policy document issued by CERT-In in May 2026 aimed at protecting digital infrastructure from evolving AI-driven cyber threats.
Cyber Security Guidelines for Smart City Infrastructure: A set of guidelines including measures for the secure usage of Artificial Intelligence and Machine Learning within smart city projects.
Ministry of Electronics & IT
Government Strengthens Cyber Resilience
Against AI-Enabled Cyber Threats through AI-
Driven Detection, Vulnerability Assessment and
Threat Intelligence
CERT-In Conducts 10 Cyber Security Exercises on AI-Driven
Cyber Threats with 1,470 Participants from 345 Government
and Private Organisations
प्रव तथ: 30 JUL 2026 2:55PM by PIB Delhi
The Government is cognizant of the evolving cyber security threats and challenges, including those arising
from Artificial Intelligence (AI) enabled cyber threats. AI technologies may increase systemic cyber risks
by enabling automated reconnaissance, rapid vulnerability exploitation, credential compromise and highly
convincing multilingual social engineering campaigns. These capabilities lower attack costs, accelerate
weaponization, and make phishing and impersonation attacks more scalable and difficult to detect.
The Government is committed to ensuring an open, safe, trusted and accountable cyberspace. Several
legal, technical and administrative policy measures have been implemented to address the risks posed by
AI-enabled cyber threats, enhance cyber resilience, and strengthen incident response capabilities, which
inter alia include:
1. AI-driven situational awareness systems are deployed by the Indian Computer Emergency
Response Team (CERT-In) to detect malicious domains and phishing activities for necessary
mitigation.
2. CERT-In has extended AI-enabled vulnerability assessment for public-facing digital assets in a
sandbox environment to detect and mitigate vulnerabilities.
3. CERT-In operates an automated cyber threat intelligence exchange platform for sharing
tailored alerts with organisations across sectors for proactive threat mitigation actions.
4. CERT-In has conducted 10 tailored cyber security exercises and drills on the theme "Building
Resilience against Frontier AI-driven Cyber Threats" during June–July 2026. These exercises
involved 1,470 participants from 345 Government and private organisations across sectors such as
Power, Telecom, Banking, Financial Services and Insurance (BFSI), Transport, Education, Health
and Space.
5. The Certified Security Professional in Artificial Intelligence (CSPAI) program was launched by
CERT-In and SISA in September 2024. This American National Standards Institute (ANSI)
National Accreditation Board (ANAB) approved program aims to equip cybersecurity
professionals with the skills to secure AI systems, proactively address AI-related threats, and
ensure trustworthy AI deployment in business environments.6. CERT-In conducts cyber security training programs in collaboration with Industry partners to
upskill the cyber security workforce in Government, public and private sectors.
7. CERT-In is one of the international partners to co-sign the joint high-level risk analysis report
on Artificial Intelligence (AI) entitled “Building trust in AI through a cyber-risk-based approach,”
published by the National Cybersecurity Agency for France (ANSSI) in February 2025.
8. Advisories and Guidelines:
i. CERT-In issues alerts and advisories regarding the latest cyber threats, vulnerabilities, and
countermeasures to protect computers, networks, and data on an ongoing basis.
ii. CERT-In has issued guidelines in June 2026 requiring all Original Equipment Manufacturers
(OEMs) and technology providers to implement AI-accelerated vulnerability protection, requiring
AI-assisted security testing, continuous monitoring, patch management, and incident response
frameworks to defend against AI-driven cyber threats.
iii. CERT-In has issued a “Blueprint for Reducing Exposure and Defending against AI-Assisted
Vulnerabilities Exploitation in Digital Infrastructure” in May 2026, aimed at protecting digital
infrastructure against rapidly evolving AI-driven cyber threats.
iv. CERT-In has issued an advisory titled “Defending Against Frontier AI Driven Cyber Risks” in April
2026, which outlined comprehensive measures for organizations, MSMEs, and individuals to
strengthen protection against advanced AI-enabled threats.
v. CERT-In has issued technical guidelines in July 2025 for Bill of Materials (BOM) for software,
hardware, Artificial Intelligence, Quantum Computing & Cryptography requirements to enhance the
security and transparency of supply chains.
vi. CERT-In has issued an advisory in March 2025 depicting best practices for effective and responsible
use of Generative AI solutions.
vii. CERT-In has published “Cyber Security Guidelines for Smart City Infrastructure” in February 2025
including measures for secure usage of Artificial Intelligence (AI) and Machine Learning (ML) for
smart city infrastructure and applications.
viii. CERT-In has issued an advisory in November 2024 on deepfake threats and measures that need to
be followed to stay protected against deepfakes.
ix. CERT-In has published a whitepaper in collaboration with Mastercard in August 2023, highlighting
the increasing attacks on Application Programming Interface (API) and use of AI in mitigating these
attacks.
x. CERT-In has issued an advisory in May 2023 on safety measures to be taken to minimize the
adversarial threats arising from Artificial Intelligence (AI) based applications.
This information was submitted by Union Minister of State Shri Jitin Prasada in Lok Sabha on
29.07.2026.
****
Vinod Kumar / Kanishk Sharma
(रलीज़ आईडी: 2291652) आगंतुक पटल : 1153
इस वज्ञ को इन भाषाओ ंम पढ़: Kannada , Urdu , ही