What are Cyber-Physical Systems? Discuss the associated cybersecurity and governance challenges as physical infrastructure becomes increasingly networked.

Cyber-Physical Systems (CPS) are engineered systems in which computational algorithms are tightly integrated with physical processes, monitored and controlled through networked sensors and actuators [1]. Recognising their centrality to Industry 4.0, the Union Cabinet approved the National Mission on Interdisciplinary Cyber-Physical Systems (NM-ICPS) in December 2018 with an outlay of Rs. 3,660 crore [2]. As power grids, transport and water systems become CPS, the cyber and physical risk surfaces merge.

Nature and spread of CPS in India

• Core technologies: AI/ML, robotics, IoT, cybersecurity, autonomous navigation and quantum technologies, developed through 25 Technology Innovation Hubs at premier institutes; four have been upgraded to Technology Translation Research Parks [3].
• Applications span smart cities, precision agriculture, smart grids, healthcare devices and defence systems.

Cybersecurity challenges

• Expanded attack surface: every sensor and legacy SCADA controller is an entry point; a software intrusion now causes physical damage — blackouts, halted metros, contaminated water.
• Critical infrastructure exposure: the IT Act's Section 70A framework, under which NCIIPC is the nodal agency, must cover an ever-widening set of networked assets [4].
• Detection and response lag: CERT-In's 2022 directions mandate reporting of cyber incidents, including attacks on IoT devices, within six hours — compliance capacity remains uneven [5].
• Import dependence in chips, sensors and controllers creates supply-chain and embedded-backdoor risks.

Governance challenges

• Fragmented jurisdiction: DST, MeitY, NCIIPC, sectoral regulators and States share overlapping mandates, diluting accountability.
• Regulatory lag: liability for autonomous-system failures, safety certification and machine-generated data ownership are unsettled.
• Skill and standards deficit: shortage of OT-security professionals and absence of uniform CPS safety standards.

CPS will define India's manufacturing competitiveness and service delivery, but security must be designed in, not retrofitted. A unified CPS governance framework — sectoral CPS security standards, mandatory security-by-design audits, indigenous hardware capability under NM-ICPS hubs, and skilling for operational-technology security — can align innovation with resilience. Only then will networked infrastructure advance, rather than endanger, national security and citizen welfare.