New Delhi: The central government has introduced stricter security norms for defence companies, mandating comprehensive upgrades to both cybersecurity and physical security infrastructure.
The revised Security Manual for Licensed Defence Industries marks the first major overhaul since 2014 and comes amid a surge in cyberattacks targeting Indian defence entities.
Under the new guidelines, defence firms need to appoint a Cyber Information Security Officer (CISO) responsible for implementing government-recommended cybersecurity protocols.
As reported, these officers will also coordinate with national cybersecurity agencies to ensure systems handling classified information meet compliance standards.
The updated rules mandate annual cybersecurity audits conducted by CERT-IN empanelled auditors.
The defence firms are also required to act on the audit findings and submit regular updates to the Ministry of Defence. They also deploy advanced security systems, including multi-factor authentication, encrypted communications and strict access controls.
On the physical security front, the defence firms will be required to set up watch towers, perimeter security grids and biometric access systems at all entry and exit points.
Employees handling sensitive data must also undergo regular re-vetting and companies are directed to conduct routine emergency drills while coordinating with local law enforcement for background verification.
The move signals the government’s intent to fortify national defence production infrastructure against both digital and physical threats in a fast-evolving security landscape.