External Factors in Internal Security

Role of State & Non-State Actors · Challenge from External State Actors · Strategies to Curb Them · CPEC, Proxy War, Operation Sindoor 2025

📄 GS Paper 3🎯 Mains Focus⏱ 18 min read📅 Updated June 2026

Understanding the External Dimension of Internal Security

Internal security refers to the maintenance of peace, sovereign authority and rule of law within a country's territory. While its threats appear domestic — insurgency, terrorism, communal violence — many are deliberately incubated, financed and directed from outside India's borders. The external dimension is therefore inseparable from internal security. India, sitting in one of the world's most volatile neighbourhoods, faces a "two-front" challenge from hostile state actors (Pakistan, China) and a web of non-state actors (terror outfits, insurgent groups, organised crime, hostile diasporas, cyber militias).

The 2008 Mumbai attacks (26/11), the 2016 Uri and Pathankot attacks, the 2019 Pulwama bombing and the 2025 Pahalgam massacre all illustrate a single pattern: external sponsorship of violence inside India. The state's response — surgical strikes (2016), the Balakot airstrike (2019) and Operation Sindoor (May 2025) — reflects an evolving doctrine of cross-border deterrence.

Key distinction: A state actor is a sovereign government (or its official organs like ISI, PLA) acting against India. A non-state actor is a non-governmental entity (terror groups, cartels, hacktivists) — though many operate as proxies under state patronage, blurring the line. This "state-sponsored non-state actor" model is central to Pakistan's strategy of plausible deniability.

Figure 1: The external threat spectrum — state actors, non-state actors, and the hybrid "proxy" model that links them.

Role of State Actors in Internal Security

Hostile neighbouring states deliberately destabilise India's internal order to advance strategic objectives without overt war. The two principal state adversaries are Pakistan and China.

Pakistan — The Proxy War Architect

Cross-border terrorism: The ISI cultivates and arms terror outfits (Lashkar-e-Taiba, Jaish-e-Mohammed) as instruments of state policy, a doctrine of "bleeding India through a thousand cuts."
Proxy war in J&K: Infiltration across the Line of Control, funding of separatists, and radicalisation campaigns sustain the Kashmir insurgency.
Fake currency & narco-terror: Printing of Fake Indian Currency Notes (FICN) and use of the "Golden Crescent" heroin trade to finance terror.
Information warfare: Coordinated disinformation, especially after events such as the 2019 Article 370 abrogation and the 2025 Pahalgam attack.

China — Strategic Coercion

LAC standoffs: Doklam (2017) and the Galwan Valley clash (June 2020) demonstrated salami-slicing tactics and "grey-zone" coercion along the Line of Actual Control.
String of Pearls & CPEC: The China–Pakistan Economic Corridor passes through Pakistan-Occupied Kashmir (Gilgit-Baltistan), violating India's sovereignty, while ports at Gwadar, Hambantota and Chittagong encircle India strategically.
Support to insurgents: Historical and alleged ongoing arms supply to North-East insurgent groups (e.g., through Myanmar corridors).
Debt-trap diplomacy & cyber intrusions: Economic leverage over neighbours (Sri Lanka, Maldives) and probing of India's critical infrastructure (e.g., the 2020 Mumbai grid-failure allegations).

Exam angle: The 2018 UPSC Mains question on CPEC directly tests the China-Pakistan nexus. Always link CPEC → sovereignty violation in PoK → encirclement → "collusive two-front threat."

Role of Non-State Actors in Internal Security

Non-state actors operate without formal sovereign authority but often enjoy covert state backing. They exploit India's open society, federal structure and porous borders.

Category	Examples	Mode of Threat
Terror organisations	LeT, JeM, Hizbul Mujahideen, ISIS-K, Al-Qaeda in the Indian Subcontinent (AQIS)	Armed attacks, suicide bombings, radicalisation
Insurgent / separatist groups	ULFA, NSCN factions, PLA (Manipur), CPI (Maoist)	Armed insurgency, extortion, parallel governance
Organised crime syndicates	D-Company, drug & arms cartels	Narco-terror, FICN, smuggling, money laundering
Diaspora extremists	Khalistan networks (SFJ, "Referendum 2020")	Funding, propaganda, lone-wolf incitement
Cyber actors / hacktivists	State-aligned APT groups, ransomware gangs	Critical infrastructure attacks, data theft
Radical online networks	Encrypted channels, social-media cells	Online radicalisation, recruitment, mobilisation

The 2016 UPSC Mains question explicitly flagged the misuse of internet and social media by non-state actors — a theme that has only deepened with end-to-end encryption, the dark web and AI-generated deepfakes by 2026.

Figure 2: How a sponsor state launders responsibility through proxy outfits to maintain "plausible deniability."

Challenge Posed by External State Actors

The challenges are multidimensional — a framework the 2021 UPSC Mains question explicitly demanded. They can be grouped across military, sub-conventional, economic, technological and ideological domains.

1. Sub-conventional / Hybrid Warfare

Cross-border terrorism and infiltration (Uri 2016, Pulwama 2019, Pahalgam 2025).
"Grey-zone" coercion below the threshold of open war — LAC transgressions, salami-slicing.

2. Economic Warfare

FICN to destabilise the economy; dumping of goods; weaponised supply chains (e.g., rare-earths, APIs for pharma).
CPEC and debt-trap diplomacy to strategically encircle and isolate India.

3. Cyber & Information Warfare

Attacks on Critical Information Infrastructure (power grids, financial systems).
Disinformation, deepfakes and coordinated inauthentic behaviour to inflame communal and regional fault lines.

4. Ideological & Demographic Subversion

Radicalisation and recruitment via online platforms.
Illegal trans-border migration altering border demographics (a theme tested in the 2014 Mains question on transborder migration).

Collusive two-front threat: The deepening China-Pakistan strategic axis (military, CPEC, diplomatic shielding of terrorists at the UN) creates the prospect of a coordinated two-front challenge — the single biggest external concern in India's security calculus by 2026.

Strategies to Curb the Challenge

India's response has evolved from reactive defence to a layered, proactive doctrine combining deterrence, diplomacy and capacity-building.

A. Military & Deterrence

Calibrated cross-border response: Surgical strikes (Sept 2016), the Balakot airstrike (Feb 2019), and Operation Sindoor (May 2025) — launched after the Pahalgam terror attack — signalling that terror sponsorship will draw kinetic costs.
Border infrastructure & integrated theatre commands: Modernisation of forces, the push toward theaterisation, and tighter LoC/LAC management.

B. Intelligence & Internal Coordination

Strengthening NATGRID, NIA, the Multi-Agency Centre (MAC), and coastal/maritime domain awareness post-26/11.
Real-time intelligence sharing between central and state agencies.

C. Diplomatic & International Cooperation

FATF leverage: Sustained pressure that kept Pakistan on the FATF "grey list" (2018–2022), forcing curbs on terror financing.
Isolating sponsors through bilateral and multilateral forums (UN, SCO, QUAD, BIMSTEC) and joint counter-terror exercises.
Extradition treaties and Mutual Legal Assistance Treaties (MLATs) to pursue fugitives.

D. Economic & Technological Resilience

De-risking supply chains (semiconductors, rare earths, pharma APIs) under "Atmanirbhar Bharat."
Hardening Critical Information Infrastructure via CERT-In, NCIIPC and the National Cyber Security Strategy.

E. Legal & Financial Tools

UAPA (1967, amended 2019 to designate individuals as terrorists), PMLA (2002), and the Enforcement Directorate to choke terror financing.
Tighter KYC, crypto-monitoring and hawala crackdowns.

Whole-of-nation approach: The most exam-ready conclusion — no single lever suffices. India needs a synchronised military-diplomatic-economic-cyber-legal response, backed by societal resilience against radicalisation and disinformation.

Figure 3: Six synchronised levers of India's whole-of-nation counter-strategy against external threats.

Current Affairs Snapshot (up to June 2026)

Pahalgam terror attack (April 2025): A mass-casualty attack on tourists in J&K, attributed to Pakistan-based outfits, triggered India's strongest cross-border response in years.
Operation Sindoor (May 2025): India's tri-services precision strikes on terror infrastructure across the border, followed by days of escalation and a halt to hostilities — re-establishing a "new normal" of punitive deterrence.
Indus Waters Treaty in abeyance (2025): India placed the treaty in abeyance as part of its coercive-diplomacy toolkit against Pakistan.
FATF & terror financing: Continued global scrutiny of terror-financing channels; India pressing for re-listing of states that shelter proxies.
LAC management with China: Following the October 2024 disengagement understanding on patrolling at Depsang and Demchok, both sides maintain a fragile, managed status quo into 2026.
Khalistan diaspora activism: Continued friction with Canada and incidents abroad keep diaspora extremism on the security agenda.

Previous Year Questions — Mains with Model Answer Structures MAINS

How to use: Each model answer is a structured outline. Flesh out each point into 2–3 sentences in the exam. This is a Mains-only subject — PYQs are covered up to UPSC Mains 2025.

UPSC GS3 2021 15 marks · 250 words

Q. "Analyse the multidimensional challenges posed by external state and non-state actors to the internal security of India. Also discuss measures required to be taken to combat these threats."

Model Answer Structure

Intro: Define internal security and its external dimension; name principal state actors (Pakistan, China) and non-state actors (LeT, JeM, cartels, diaspora).
State actor challenges: Pakistan's proxy war, ISI sponsorship; China's LAC coercion, CPEC sovereignty violation, two-front collusion.
Non-state actor challenges: Cross-border terrorism, narco-terror, FICN, online radicalisation, Khalistan funding.
Multidimensional spread: Military (Galwan), sub-conventional (Pulwama), economic (CPEC), cyber (grid attacks), ideological (radicalisation).
Measures — hard power: Surgical strikes, Balakot, Operation Sindoor 2025; border & intelligence reforms (NATGRID, MAC).
Measures — soft & structural: FATF diplomacy, UAPA/PMLA, cyber hardening (CERT-In), supply-chain resilience, counter-radicalisation.
Conclusion: A synchronised whole-of-nation approach — military, diplomatic, economic, cyber and legal — backed by societal resilience.

UPSC GS3 2018 15 marks · 250 words

Q. "China and Pakistan have entered into an agreement for the development of an economic corridor. What threat does this pose for India's security? Comment."

Model Answer Structure

Intro: Briefly explain CPEC as the flagship of China's BRI, linking Kashgar to Gwadar.
Sovereignty violation: CPEC passes through Gilgit-Baltistan in Pakistan-Occupied Kashmir — Indian territory.
Strategic encirclement: Gwadar + "String of Pearls" (Hambantota, Chittagong) constricts India's maritime space.
Two-front consolidation: Deepens China-Pakistan military and economic collusion; PLA presence in PoK.
Internal security spillover: Enhanced funding routes and strategic depth for anti-India proxies.
India's response: Boycott of BRI, connectivity counters (INSTC, Chabahar), QUAD, neighbourhood diplomacy.
Conclusion: CPEC is both a sovereignty and a strategic-encirclement threat requiring diplomatic, economic and maritime countermeasures.

UPSC GS3 2016 12.5 marks · 200 words

Q. "Use of internet and social media by non-state actors for subversive activities is a major concern. How have these been misused in the recent past? Suggest effective guidelines to curb the above threat."

Model Answer Structure

Intro: Non-state actors exploit the open, borderless nature of cyberspace and social media.
Modes of misuse: Radicalisation & recruitment (ISIS), propaganda, fund-raising, encrypted coordination, fake news inciting communal violence.
Recent instances: Online radicalisation cases, rumour-driven mob violence, Khalistan "Referendum 2020" campaigns, deepfake disinformation.
Challenges: Encryption, attribution difficulty, jurisdiction, free-speech balance.
Guidelines — tech & legal: IT Rules 2021 (intermediary due diligence), traceability, takedown timelines, CERT-In coordination.
Guidelines — institutional & social: Counter-narratives, digital literacy, platform accountability, public-private cooperation.
Conclusion: Balance security with civil liberties through a calibrated, rights-respecting regulatory framework.

UPSC GS3 2014 12.5 marks · 200 words

Q. "How illegal transborder migration does pose a threat to India's security? Critically examine why the Naga Peace Accord is in the news, and what are the contentious issues."

Model Answer Structure

Intro: Define illegal trans-border migration (esp. from Bangladesh) as a non-traditional security threat.
Security threats: Demographic change in border districts, strain on resources, infiltration cover for terror/insurgents, vote-bank politics.
Internal stability: Ethnic tensions in Assam/NE, communal polarisation, pressure on NRC.
Naga Peace Accord context: 2015 framework agreement with NSCN(IM); demands of "Greater Nagalim," separate flag/constitution.
Contentious issues: Territorial integration of Naga areas across states, sovereignty demands, opposition from neighbouring states.
Way forward: Robust border management, updated registers, inclusive dialogue, regional development.
Conclusion: Both issues underscore how external migration and unresolved insurgencies feed internal insecurity.

⚡ Quick Revision

State actors: Pakistan (ISI proxy war), China (LAC, CPEC)
Non-state actors: LeT, JeM, cartels, Khalistan, cyber gangs
Hybrid model: State-sponsored non-state actors → deniability
Threat domains: military, sub-conventional, economic, cyber, ideological
Counter: military + diplomatic + economic + cyber + legal

📌 Must-Know Facts

CPEC runs through Gilgit-Baltistan (PoK) → sovereignty violation
FATF grey list: Pakistan 2018–2022
Galwan clash: June 2020
Doklam standoff: 2017
Operation Sindoor: May 2025 (post-Pahalgam)
UAPA 2019 amendment: designate individuals as terrorists

🏛️ Key Agencies

NIA — terror investigation
NATGRID — intelligence grid
MAC — Multi-Agency Centre
ED — terror financing (PMLA)
CERT-In / NCIIPC — cyber defence

✍️ Answer Keywords

"Bleeding through a thousand cuts"
Plausible deniability
Grey-zone / salami-slicing
Collusive two-front threat
Whole-of-nation approach
Hybrid & sub-conventional warfare