Lt Gen (Retd) Rajesh Pant, the national cyber security coordinator, announced on Monday that the National Cyber Security Reference Framework (NCRF) 2023 has been approved and will be made public. The NCRF policy will provide strategic guidance for critical sectors such as banking, energy, and others to address cyber security concerns. Pant emphasized the need for a system to guide organizations, especially in critical sectors, on the best practices for creating cyber secure systems. The government has selected seven sectors as critical sectors, including telecom, power and energy, banking and financial services, transportation, strategic enterprises, government enterprises, and healthcare. NCRF 2023 is the first follow-up to the Ministry of Electronics and Information Technology’s National Cyber Security Policy 2013. Industry experts believe that the policy will be different from directives under the Indian Computer Emergency Response Team (Cert-In), published by Meity on 28 April. However, some experts believe that the framework document may not have legal implications in improving India’s cyber security environment. Pawan Duggal, Supreme Court lawyer, said that approaching dedicated regulations towards cyber security is important amid incidents such as the cyber attack on All India Institute of Medical Sciences (Aiims) on 23 November last year and the reported data breach on the Center’s covid-19 vaccination platform, Cowin, on Monday.