#FactCheck-Protest Video from Nagrota Falsely Linked to Opposition Against Indian Army

Introduction

‍

In the hyperconnected world, cyber incidents can no longer be treated as sporadic disruptions; such incidents have become an everyday occurrence. The attack landscape today is very consequential and shows significant multiplication in its frequency, with ransomware attacks incapacitating a health system, phishing attacks hitting a financial institution, or state-sponsored attacks on critical infrastructures. Towards counteracting such threats, traditional ways alone are not enough, they gravely rely on manual research and human intellect. Attackers exercise speed, scale, and stealth, and defenders are always four steps behind. With such a widening gap, it is deemed necessary to facilitate incident response and crisis management with the intervention of automation and artificial intelligence (AI) for faster detection, context-driven decision-making, and collaborative response beyond human capabilities.

‍

Incident Response and Crisis Management

‍

Incident response is the structured way in which organisations deal with responding to detecting, segregating, and recovering from security incidents. Crisis management takes this even further, dealing not only with the technical fallout of a breach but also its business, reputation, and regulatory implications. Echelon used to depend on manual teams of people sorting through logs, cross-correlating alarms, and generating responses, a paradigm effective for small numbers but quickly inadequate in today's threat climate. Today's opponents attack at machine speed, employing automation to launch attacks. Under such circumstances, responding with slow, manual methods means delay and draconian consequences. The AI and automation introduction is a paradigm change that allows organisations to equate the pace and precision with which attackers initiate attacks in responding to incidents.

‍

How Automation Reinvents Response

‍

Cybercrime automation liberates cybercrime analysts from boring and repetitive tasks that consume time. An analyst manually detects potential threats from a list of hundreds each day, while automated systems sift through noise and focus only on genuine threats. Malware can automatically cause infected computers to be disconnected from the network to avoid spreading or may automatically have its suspicious account permissions removed without human intervention. The security orchestration systems move further by introducing playbooks, predefined steps describing how incidents of a certain type (e.g., phishing attempts or malware infections) should be handled. This ensures fast containment while ensuring consistency and minimising human error amid the urgency of dealing with thousands of alerts.

Automation takes care of threat detection, prioritisation, and containment, allowing human analysts to refocus on more complex decision-making. Instead of drowning in the sea of trivial alerts, security teams can now devote their efforts to more strategic areas: threat hunting and longer-term resilience. Automation is a strong tool of defence, cutting response times down from hours to minutes.

‍

The Intelligence Layer: AI in Action

‍

If automation provides speed, then AI is what allows the brain to be intelligent and flexible. Working with old and fixed-rule systems, AI-enabled solutions learn from experiences, adapt to changes in threats, and discover hidden patterns of which human analysts themselves would be unaware. For instance, machine learning algorithms identify normal behaviour on a corporate network and raise alerts on any anomalies that could indicate an insider attack or an advanced persistent threat. Similarly, AI systems sift through global threat intelligence to predict likely attack vectors so organisations can have their vulnerabilities fixed before they are exploited.

AI also boosts forensic analysis. Instead of searching forever for clues, analysts let AI-driven systems trace back to the origin of an event, identify vulnerabilities exploited by attackers, and flag systems that are still under attack. During a crisis, AI is a decision support that predicts outcomes of different scenarios and recommends the best response. In response to a ransomware attack, for example, based on context, AI might advise separating a single network segment or restoring from backup or alerting law enforcement. 

‍

Real-World Applications and Case Studies

‍

Already, this mitigation has been provided in the form of real-world applications of automation and AI. Consider, for example, IBM Watson for Cybersecurity, which has been applied in analysing unstructured threat intelligence and providing analysts with actionable results in minutes, rather than days. Like this, systems driven by AI in DARPA's Cyber Grand Challenge demonstrated the ability to automatically identify an instant vulnerability, patch it, and reveal the potential of a self-healing system. AI-powered fraud detection systems stop suspicious transactions in the middle of their execution and work all night to prevent losses. What is common in all these examples is that automation and AI lessen human effort, increase accuracy, and in the event of a cyberattack, buy precious time.

‍

Challenges and Limitations

‍

While promising, the technology is still not fully mature. The quality of an AI system is highly dependent on the training data provided; poor training can generate false positives that drown teams or worse false negatives that allow attackers to proceed unabated. Attackers have also started targeting AI itself by poisoning datasets or designing malware that does not get detected. Aside from risks that are more technical, the operational and financial costs involved in implementing advanced AI-based systems present expensive threats to any company. Organisations will have to make expenditures not only on technology but also for the training of staff to best utilise these tools. There are some ethical and privacy issues to consider as well because systems may be processing sensitive personal data, so global data protection laws such as the GDPR or India's DPDP Act could come into conflict.

‍

Creating a Human-AI Collaboration

‍

The future is not going to be one of substitution by machines but of creating human-AI synergy. Automation can do the drudgery, AI can provide smarts, and human professionals can use judgment, imagination, and ethical decisions. One would want to build AI-fuelled Security Operations Centres where technology and human experts work in tandem. Continuous training must be provided to AI models to reduce false alarms and make them most resistant against adversarial attacks. Regular conduct of crisis drills that combine AI tools and human teams can ensure preparedness for real-time events. Likewise, it is worth integrating ethical AI guidelines into security frameworks to ensure a stronger defence while respecting privacy and regulatory compliance.

‍

Conclusion

‍

Cyber-attacks are an eventuality in this modern time, but the actual impact need not be so harsh. The organisations can maintain the programmatic method of integrating automation and AI into incident response and crisis management so that the response against the very threat can be shifted from reactive firefighting to proactive resilience. Automation gives speed and efficiency while AI gives intelligence and foresight, hence putting the defenders on par and possibly exceeding the speed and sophistication of the attackers. But an utmost system without human inquisitiveness, ethical reasoning, and strategic foresight would remain imperfect. The best defence is in that human-machine relationship symbiotic system wherein automation and AI take care of how fast and how many cyber threats come in, whereas human intellect ensures that every response is aligned with larger organizational goals. This synergy is where cybersecurity resiliency will reside in the future-the defenders won't just be reacting to emergencies but will rather be driving the way.

‍

References

‍

• https://www.sisainfosec.com/blogs/incident-response-automation/
• https://stratpilot.ai/role-of-ai-in-crisis-management-and-its-critical-importance/
• https://www.juvare.com/integrating-artificial-intelligence-into-crisis-management/
• https://www.motadata.com/blog/role-of-automation-in-incident-management/

‍

Data localisation refers to restrictions in the data flow by limiting the physical storage and processing of data within a given jurisdiction’s boundaries.  

An obvious benefit contributing to the importance of data localisation is the privacy benefits it offers. In addition to this, data localisation also has the potential to safeguard sensitive data and decrease the probability of cyber-attacks. In India, data localisation has become a key issue in the last decade due to the increase in the discourse for data privacy. 

The Legal Framework in India

India passed the Digital Personal Data Protection Act of 2023 which directs the data fiduciaries (collectors and processors of digital personal data) to store the data of Indian citizens within India. This push for data localisation aligns with India’s position to enhance privacy, national security and regulatory control. It further requires data fiduciaries to adhere to the principles of data minimisation, purposeful limitation and consent of the data principles. Further, Section 17 of the Act prohibits the transfer of sensitive personal data to foreign jurisdictions unless they meet satisfactory privacy protection standards. 

The Reserve Bank of India, via a circular for Payments Data Regulation in 2018, has mandated that all payment data be stored in India, though it can be processed abroad. It requires the telecom sector to ensure local storage and local processing of subscriber information. It further prohibits the transferring of subscribers’ account information overseas.

MeitY’s Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, emphasise data localisation, specifically when it involves government or critical data. The main idea behind this is that data related to Indian citizens or government activities should remain accessible to Indian law enforcement agencies and is not subject to external jurisdiction.

Common Misinformation about Data Localisation and its Impact

Misconceptions fuel misinformation and influence public perception and policy debates. A common misconception is that all data must be stored in India. It should be noted that non-critical and non-sensitive data are not subject to localisation, and can be cleared for cross-border transfers under specific circumstances.

Another misconception is that data localisation alone ensures complete security. A robust cybersecurity approach, infrastructure and capabilities are what guarantee security and this holds true regardless of the location of where the data is stored. 

The notion that small businesses and startups will suffer the most is untrue. While data localisation policies may lead to increased costs, they foster innovation in the domestic infrastructure and services. This potentially fuels development and innovation in these small businesses and startups. Claims that data localisation will stifle global business are unfounded. 

Proper regulations for data transfers can help balance data flows, enabling international trade while ensuring data sovereignty.

Real Impact of Data Localisation

Data localisation impacts several domains and has both positive and negative outcomes.

• It can be a driver for investment in local data centres and infrastructure, thereby inducing employment generation and boosting the domestic economy. And in contrast, the compliance costs may rise especially for MNCs that need to maintain multiple data storage systems. 
• It can expedite the growth of local technology ecosystems while encouraging innovation in cloud computing and data storage solutions. On the other hand, small businesses might face struggles to afford the required infrastructure updates and upgrades.
• Law enforcement agencies will be able to gain access to data more swiftly while avoiding lengthy processes such as the Mutual Legal Assistance Treaties (MLATs). However, it should be noted that storing data locally does not automatically ensure that they are immune from attacks and breaches.
• A balance between sovereignty and global partnerships is a challenge that emerges with data localisation. International Trade Relationships are vulnerable to data localisations where countries favour a free data flow. This can hamper foreign collaborations with companies that rely on global data systems.

CyberPeace Outlook

It is important to clear misinformation about data localisation, some strategies that can be undertaken are:

• Launching public awareness campaigns to educate the stakeholders about the real requirements and the benefits of data localisation. Misinformation about data restrictions and security guarantees should be tackled fairly quickly. 
• A balanced approach that promotes local economic development while at the same time allowing for the necessary cross-border data flows and creating a flexible and friendly business environment is important.
• India should work on international frameworks to streamline the process of data-sharing with other nations. This would protect national interests while making global cooperation easier.

Conclusion

Data localisation in India presents a valuable opportunity to enhance privacy, bolster national security, and stimulate economic growth through local infrastructure investment. Yet, addressing common misconceptions is crucial; the belief that all data must be stored domestically or that localisation alone ensures security is misleading. 

It’s vital to pair local data storage with robust cybersecurity measures and foster international cooperation. Supporting small businesses, which may face challenges due to localisation requirements, is equally important. By addressing misinformation, promoting flexible regulations, and working towards global data-sharing frameworks, India can effectively manage the complexities of data localisation, safeguarding national interests while encouraging innovation and economic development. 

References

• https://www.thehindu.com/sci-tech/technology/are-data-localisation-requirements-necessary-and-proportionate/article66131957.ece 
• https://carnegieendowment.org/research/2021/04/how-would-data-localization-benefit-india?lang=en
• https://www.rbi.org.in/commonperson/English/Scripts/FAQs.aspx?Id=2995
• https://www.meity.gov.in/writereaddata/files/Information%20Technology%20%28Intermediary%20Guidelines%20and%20Digital%20Media%20Ethics%20Code%29%20Rules%2C%202021%20%28updated%2006.04.2023%29-.pdf 

Introduction
‍

India’s data centre sector is rapidly emerging as strategic national infrastructure at the centre of the country’s AI ambitions, fuelled by a combination of technological advancements and the global political economy. Estimates suggest that national data centre capacity is expected to rise from 1.2 GW in 2025 to almost 8 GW by 2030. With a funding of ₹10,372 crore, the IndiaAI Mission aims to establish domestic compute power and expand GPU infrastructure throughout the nation. Simultaneously, the Digital Personal Data Protection (DPDP) Act, 2023 has introduced a form of “soft localisation,” empowering the government to mandate domestic storage for sensitive categories of data.

Together, this push for infrastructure aims to transform India from a passive data market into an active shaper of global data flows. Yet India’s current policy model differs significantly from the approaches being adopted in other major digital economies. A comparison with Singapore and the European Union reveals that while India is focused on aggressive data centre expansion, other jurisdictions are increasingly prioritising sustainability, efficiency, and digital sovereignty.

This raises a critical policy question: can India scale its AI infrastructure ambitions while accounting for the governance and resource challenges that other markets are now attempting to correct?
‍

India’s Incentive-Led AI Infrastructure Push
‍

India’s current approach to data centre expansion is fundamentally facilitative. The state is acting as an enabler of rapid private investment through fiscal incentives and infrastructure prioritisation.

The Union Budget 2022 had classified data centres as “infrastructure,” which enables developers to access cheaper institutional financing and long-term capital. The Union Budget 2026 further introduced tax holidays for foreign cloud providers using Indian facilities for global operations. At the state level, governments such as Maharashtra and Uttar Pradesh are aggressively competing to attract hyperscale investments through electricity duty exemptions, expedited approvals, and “essential service” status designed to guarantee uninterrupted operations.

This approach reflects India’s broader strategic positioning. As global demand for AI compute accelerates, India seeks to establish itself not only as a major digital market, but as a sovereign compute hub for the Global South.

The IndiaAI Mission demonstrates this ambition clearly. By seeking to scale domestic GPU capacity to 100,000 units, the government is recognising that compute infrastructure is increasingly becoming geopolitically strategic. AI leadership will now depend on the ability to control and secure the physical infrastructure powering advanced AI systems.

However, while India’s policy framework strongly incentivises capacity creation, it remains relatively underdeveloped in areas such as sustainability benchmarks, resource management, and operational accountability.
‍

Singapore and the European Union: Governance After Scale
‍

Singapore and the European Union offer models of digital infrastructure governance as rapid infrastructure growth starts to raise resource and sovereignty issues.

With the limited energy resources and land at its disposal, Singapore has shifted from unrestricted data centre growth to a tightly managed sustainability-first model. Through the Data Centre Call for Application (DC-CFA) framework, only projects meeting strict efficiency and economic value criteria are approved. For instance, new facilities are expected to maintain Power Usage Effectiveness (PUE) levels of 1.3 or lower and submit detailed water efficiency plans to comply with advanced environmental standards. The country has also developed tropical cooling standards that allow facilities to run at higher ambient temperatures, reducing cooling energy consumption significantly. Rather than uninhibited growth, Singapore is now geared towards growth efficiency.

The European Union, on the other hand, is pursuing a sovereignty-oriented governance model in response to geopolitical pressures. However, it is still introducing energy reporting requirements and waste heat recovery rules into digital infrastructure rules through the revised Energy Efficiency Directive and proposed EU Cloud and AI Development Act. Simultaneously, the Digital Markets Act (DMA) is being used to investigate hyperscale cloud providers for potential “gatekeeper” behaviour, reflecting concerns about excessive concentration of digital infrastructure power in the hands of a few non-European firms. This approach shows that sovereignty and energy efficiency can go hand-in-hand.

These models illustrate an important trend: digital infrastructure governance is shifting from the promotion of investment to sustainability, competition regulation and strategic autonomy.
‍

India’s Emerging Governance Challenge
‍

India’s current trajectory and global geopolitical tensions suggest that pressures regarding sustainability and sovereignty are set to intensify over the next decade.

AI infrastructure is resource-intensive by design. For example, a single modern AI server rack can consume up to 250 kilowatts (kW) of power, compared to a traditional enterprise server rack which typically requires only 15 kW. Despite the use of water use effectiveness (WUE) technologies, the sheer volume of heat transfer means that AI data centres can still put immense pressure on local water resources, especially in warmer climates. These figures juxtaposed against hyperscale clusters mean the volumes of electricity, cooling systems, land, water, and high-density compute rise by significant orders of magnitude.  Yet most Indian policies remain overwhelmingly focused on fiscal incentives rather than long-term resource governance.

This creates the risk of a reactive policy cycle in which sustainability standards are introduced only after resource pressures become acute. Urban concentration, grid stress, water scarcity, and energy reliability may eventually force abrupt regulatory interventions which can lead to higher compliance costs and uncertainty in operations.

At the same time, India’s push for sovereign AI infrastructure also raises broader questions around digital sovereignty and institutional capacity. Procuring GPUs alone does not create an AI ecosystem. Secure hosting environments, skilled infrastructure personnel, cybersecurity preparedness, and interoperable governance mechanisms are equally essential.

This makes workforce development a strategic human resource development issue rather than simply an industrial challenge. Without sufficient thermal engineers, cybersecurity professionals, and digital infrastructure specialists, India’s infrastructure ambitions may struggle to translate into long-term resilience.
‍

Building Governance into the Expansion Phase
‍

India’s current “pre-regulatory” moment also presents a significant opportunity. Because the sector is still evolving, both policymakers and infrastructure actors have the ability to shape governance standards before constraints become restrictive.

It is vital to establishing national sustainability benchmarks through public-private technical partnerships, possibly under the aegis of of NITI Aayog, the Bureau of Energy Efficiency (BEE) and MeitY, before the next resource pressures dictate reactive regulation. Pilot “sustainability sandboxes” focused on liquid immersion cooling, renewable integration, battery energy storage systems, and water-efficient operations could help create evidence-based policy frameworks tailored to Indian conditions. Similarly, Likewise, collaborations with skilling institutions like NSDC and NIELIT can contribute to the development of dedicated digital infrastructure academies for thermal engineering, cybersecurity, and AI infrastructure management.

This would support India to progress towards a sovereign AI infrastructure stack, bringing together compute capacity, sustainability, capacity building and governance resilience into a seamless ecosystem.
‍

Conclusion
‍

With AI systems become increasingly utilised in finance, healthcare, governance, and public services, the infrastructure ecosystem supporting them will become equally politically and strategically significant. The choices India makes today to operationalise sustainability, skilling, competition, and sovereign compute capacity will shape the foundations of its future AI economy.

The central challenge is no longer whether India can become a major AI infrastructure hub. It is whether the country can transition from an incentive-led expansion model toward a governance framework that balances scale with sustainability, sovereignty, democratic accountability, and long-term resilience.

That transition may ultimately define the success of India’s AI century.
‍

References
‍

https://www.thehindubusinessline.com/info-tech/economic-survey-indias-data-centre-capacity-to-reach-about-8-gw-by-2030/article70566326.ece

https://indiaai.gov.in/news/cabinet-approves-india-ai-mission-at-an-outlay-of-rs-10-372-crore

https://vidhilegalpolicy.in/blog/cross-border-data-transfers-and-data-localization-mandate-under-the-data-protection-regime/

https://www.sttelemediagdc.com/in-en/resources/what-does-infrastructure-status-mean-data-centre-industry

https://www.midcindia.org/wp-content/uploads/2021/09/IT-ITES_Policy_2015.pdf

https://uplc.up.gov.in/en/page/uttar-pradesh-data-center-policy

https://www.imda.gov.sg/resources/press-releases-factsheets-and-speeches/press-releases/2025/sg-it-energy-efficiency-standard-for-data-centres-launched

‍