The Cybersecurity Lesson in E-Rickshaws

Question (10 marks, ~150 words):

"As everyday devices become connected computers, their security becomes a matter of public safety." In the light of vulnerabilities in EV battery systems, discuss the institutional and policy measures India needs for securing connected devices and critical infrastructure.

Introduction:

• Delhi e-rickshaws stalling due to exploitable Battery Management Systems shows how safety-critical devices are now software-defined and connected — a small failure with a large lesson for cybersecurity.

The risk:

• Connected battery systems accepting weak or default credentials can be accessed, even disabled, remotely.
• Such systems are part of critical infrastructure across power and transport.

Institutional base:

• CERT-In provides incident response and guidance; NCIIPC protects critical information infrastructure; MeitY oversees the domain.
• What is missing is a mandatory, connected-device security baseline.

Policy measures:

• Secure-by-design mandates, a Software Bill of Materials, coordinated vulnerability disclosure, and security assurance for imported and local systems.
• Adapt global tools — cyber-resilience rules and a 'digital battery passport' for traceability.

Conclusion:

• With grids, transport and payments running on connected software, security must be built in — through binding standards, transparency and accountable makers — to keep convenience from becoming public risk.