Cities told to appoint CISOs as India boosts cyber defences

Union Home Secretary Govind Mohan, during a high-level cybersecurity preparedness meeting, stressed that cities must build in-house cyber capabilities by appointing CISOs, as reliance on external vendors is insufficient for protecting the increasingly vital digital infrastructure of Smart Cities

As Indian cities rapidly digitize core public services, the Union Home Ministry has called for the appointment of Chief Information Security Officers (CISOs) across all urban local bodies to safeguard municipal digital infrastructure and citizen data from rising cyber threats.

The directive was issued during a recent high-level review meeting on cybersecurity preparedness, led by Union Home Secretary Govind Mohan. Citing the growing complexity of digital services under the Smart Cities Mission, Mohan stressed the need for internal cyber leadership rather than relying solely on external vendors. “Cities must develop their own cybersecurity muscle. CISOs will be the first responders in an era where digital systems are critical public assets,” he said.

The meeting saw participation from key stakeholders, including officials from the Ministries of Electronics and IT, Urban Affairs, and Home Affairs, as well as representatives from UIDAI, state governments, and intelligence agencies. The consensus was clear: with digitization touching every aspect of urban life—from property records and water supply to traffic management and public safety—cities are becoming increasingly vulnerable to cyberattacks.

National push for cyber readiness

Many cities currently depend on private consultants for IT security, but experts warn this model lacks agility, continuity, and accountability during real-time crises. “Cyber threats don’t wait for central approvals. Local CISOs will help ensure faster decision-making and coordinated response,” an Intelligence Bureau official noted.

To support this effort, the Ministry of Housing and Urban Affairs is working on a national initiative that will provide technical and financial assistance to cities in setting up and maintaining cybersecurity frameworks. The plan will also help cities enhance their IT command centers, which serve as nerve centers for managing digital services.

Cybersecurity experts welcomed the move, highlighting the growing importance of securing interconnected systems that power urban life. Smart cities rely heavily on IoT devices, integrated platforms, and real-time data exchange, making them attractive targets for malicious actors.

“A cyberattack on one city’s infrastructure can disrupt services across regions if systems are interconnected. Appointing CISOs at the city level creates a layer of defence that is both proactive and responsive,” said a senior cybersecurity analyst.

By embedding cybersecurity leadership within city administrations, the government aims to build a digitally resilient urban ecosystem—one that can protect public trust in the nation’s smart governance efforts.