Security Forces, Agencies & National Security Architecture

Central Armed Police Forces · Intelligence & Investigation Agencies · AFSPA · Kargil Review Committee · NSC, NSA & CDS · Theaterisation · Defence Indigenisation

📄 GS Paper 3🎯 Mains Focus⏱ 18 min read📅 Updated June 2026

Why Security Forces & Architecture Matter

India's internal and external security is delivered not by a single body but by an ecosystem of armed forces, paramilitary and central armed police forces, intelligence agencies, investigation agencies and a national security decision-making architecture. The effectiveness of any counter-terror, counter-insurgency or border-management response depends on how well these organisations are mandated, resourced, modernised and coordinated.

From the Kargil intrusion of 1999 — which exposed intelligence and coordination failures — to the 26/11 Mumbai attacks of 2008 that birthed the NIA and NATGRID, every major security shock has reshaped this architecture. The 2019 creation of the Chief of Defence Staff (CDS) and the ongoing move toward theatre commands, demonstrated in Operation Sindoor (May 2025), mark the latest phase of reform toward jointness and integration.

Key distinction: The Indian Armed Forces (Army, Navy, Air Force) defend against external aggression under the Ministry of Defence. The Central Armed Police Forces (CAPFs) — wrongly called "paramilitary" — are under the Ministry of Home Affairs for internal security and border guarding. Intelligence agencies collect and assess; investigation agencies prosecute. Understanding these silos — and the need to bridge them — is the heart of this topic.

1. Security Forces under the Ministry of Home Affairs — CAPFs

The Central Armed Police Forces (CAPFs) are seven armed forces of the Union under the administrative control of the Ministry of Home Affairs (MHA). They handle internal security, counter-insurgency, border guarding, industrial security and VIP protection — freeing the Army for its primary external role.

The Seven CAPFs

CRPF (Central Reserve Police Force): The largest CAPF and the country's premier internal-security force. Deployed for anti-Naxal operations, J&K law and order, election duty and riot control. Its specialised jungle-warfare unit is CoBRA (Commando Battalion for Resolute Action); it also has the Rapid Action Force (RAF) for communal riots and the Commando battalion for women (Mahila).
BSF (Border Security Force): "First Line of Defence" — guards the international borders with Pakistan and Bangladesh during peacetime; first responder to infiltration and cross-border crime.
CISF (Central Industrial Security Force): Protects critical industrial undertakings, nuclear and aerospace installations, airports (aviation security), the Delhi Metro and government buildings; also offers consultancy security.
ITBP (Indo-Tibetan Border Police): Guards the India–China border (LAC) across high-altitude Himalayan terrain; a specialised mountaineering and high-altitude force.
SSB (Sashastra Seema Bal): Guards the open and porous borders with Nepal and Bhutan; focus on anti-smuggling, anti-trafficking and population engagement in border areas.
Assam Rifles: The oldest paramilitary force ("Sentinel of the North-East" / "Friends of the Hill People"); guards the India–Myanmar border and conducts counter-insurgency in the North-East. It has dual control — administrative control with MHA, operational control with the Indian Army (MoD).
NSG (National Security Guard): The elite "Black Cats" — a federal contingency force for counter-terrorism, counter-hijack and hostage rescue, raised after Operation Blue Star; deployed during 26/11.

Terminology tip: Strictly, India's only "paramilitary forces" are the Assam Rifles, the Special Frontier Force and the Indian Coast Guard (officered by the Army/Navy/Air Force). The MHA's seven forces are officially "Central Armed Police Forces (CAPFs)," not "paramilitary." Using the right term scores marks.

Issues with the CAPFs

Deployment & operational stress: Prolonged deployment in hostile theatres (Naxal belt, J&K), denial of leave, and family separation cause severe fatigue.
Attrition, suicides & fratricide: Rising voluntary retirements, resignations and a worrying number of suicides and fratricidal incidents linked to stress and grievance redressal gaps.
Cadre & leadership issues: Friction over deputation of IPS officers to top posts vs. promotion of cadre officers; demands for "Organised Group A Service" parity were partly settled by courts.
Modernisation gaps: Shortfalls in modern weapons, protective gear, surveillance and housing; the Modernisation Plan and "Smart" border-management systems (CIBMS) aim to fill these.
Welfare & pay: Disparities in risk/hardship allowance, the absence of OROP-type benefits, and housing satisfaction levels remain grievances.

Figure 1: The seven Central Armed Police Forces, their core mandates and the borders/domains they guard.

CAPFs at a Glance

Force	Core Role	Border / Domain
CRPF (+ CoBRA, RAF)	Largest CAPF; internal security, anti-Naxal, riot control, election duty	Internal / Left-Wing Extremism belt, J&K
BSF	"First Line of Defence"; peacetime border guarding, anti-infiltration	Pakistan & Bangladesh borders
CISF	Industrial, nuclear, aerospace & aviation security; PSU and metro security	Critical installations & airports
ITBP	High-altitude border guarding; mountaineering force	India–China border (LAC)
SSB	Open-border guarding; anti-smuggling, anti-trafficking, civic action	Nepal & Bhutan borders
Assam Rifles	Counter-insurgency in NE; border guarding (dual MHA + Army control)	India–Myanmar border, North-East
NSG ("Black Cats")	Federal counter-terror, counter-hijack & hostage-rescue contingency force	Pan-India special operations

2. Intelligence Agencies

Intelligence is the first line of national defence. India's intelligence community is functionally split between internal and external collection, with technical and military verticals and coordination platforms layered on top.

Core Agencies

IB (Intelligence Bureau): India's oldest intelligence agency (1887), under the Ministry of Home Affairs. Handles internal/domestic intelligence — counter-terrorism, counter-intelligence, VIP threat assessment and inputs on insurgency and communal situations.
RAW (Research & Analysis Wing): India's external intelligence agency (created 1968 after the 1962 and 1965 wars), under the Cabinet Secretariat, reporting to the PMO. Focus on foreign HUMINT, covert action and strategic assessment of neighbours.
NTRO (National Technical Research Organisation): The premier technical intelligence agency (SIGINT, IMINT, cyber, satellite), set up after the Kargil Review Committee; works under the National Security Adviser.
DIA (Defence Intelligence Agency): Apex military intelligence body (raised 2002, post-Kargil) that integrates inputs from the Army, Navy and Air Force intelligence directorates under the Integrated Defence Staff.
MAC (Multi-Agency Centre): A 24x7 intelligence-sharing platform under the IB, created post-Kargil and strengthened post-26/11, to pool and disseminate terror-related intelligence across central and state agencies (with State Multi-Agency Centres — SMACs).
NATGRID (National Intelligence Grid): A post-26/11 IT backbone linking databases (immigration, banking, telecom, etc.) to give authorised agencies real-time, secure access for counter-terror investigations.

IB vs RAW (the classic distinction): IB = internal, under MHA, oldest. RAW = external, under Cabinet Secretariat/PMO, born 1968. Neither is created by a statute — both function under executive authority, a point critics raise on the demand for parliamentary oversight.

3. Investigation Agencies for National Security

Where intelligence agencies gather and assess, investigation agencies build cases and prosecute. Two are central to national security.

CBI (Central Bureau of Investigation)

India's premier investigating agency, set up under the Delhi Special Police Establishment (DSPE) Act, 1946; handles corruption, economic offences and special crimes, and important inter-state and national cases referred by courts/government.
"Caged parrot": The Supreme Court's 2013 description (in the coal-blocks case) of the CBI as a "caged parrot speaking in its master's voice" captured concerns over political interference and lack of functional autonomy.
General consent withdrawal: Because the CBI needs state consent to operate in a state (under the DSPE Act), several states have withdrawn "general consent", limiting the CBI to case-specific permissions — a federalism flashpoint.
Reform demands: a statutory charter, insulation from interference, and a transparent appointment of the Director (now via a committee of PM, Leader of Opposition and CJI).

NIA (National Investigation Agency)

India's central counter-terror investigation agency, created by the NIA Act, 2008 in the aftermath of the 26/11 Mumbai attacks; investigates scheduled offences relating to terrorism, terror financing, and threats to sovereignty.
It can suo-motu take up scheduled offences and investigate without prior state consent — a "federal agency" for terror.
NIA (Amendment) Act, 2019: Expanded its mandate to include human trafficking, counterfeit currency, manufacture/sale of prohibited arms, cyber-terrorism and offences under the Explosive Substances Act; allowed setting up of special NIA courts; and crucially gave it extra-territorial jurisdiction — power to investigate offences committed outside India affecting Indian interests/citizens.
Concerns: low conviction rate in some categories, potential overreach into the federal domain of "police" (a State subject), and resource constraints.

Exam framing: NIA = a dedicated federal terror agency (statutory, 2008). CBI = a general-purpose investigating agency under a 1946 Act needing state consent. The contrast — statutory vs non-statutory mandate, consent vs no-consent — is a favourite analytical hook.

Intelligence vs Investigation Agencies

Agency	Type	Parent / Statute	Core Mandate
IB	Intelligence (internal)	MHA · non-statutory (1887)	Domestic intelligence, counter-intelligence
RAW	Intelligence (external)	Cabinet Secretariat · 1968	Foreign intelligence, covert action
NTRO	Intelligence (technical)	Under NSA · post-Kargil	SIGINT, cyber, satellite imagery
MAC / NATGRID	Coordination / data grid	IB / MHA · post-26/11	Intelligence sharing & data linkage
CBI	Investigation	DSPE Act 1946 · needs consent	Corruption, economic & special crimes
NIA	Investigation (terror)	NIA Act 2008 (amended 2019)	Terrorism; extra-territorial jurisdiction

Figure 2: How intelligence agencies (IB, RAW, NTRO, DIA), coordination grids (MAC, NATGRID) and investigation agencies (NIA, CBI) interconnect.

4. Legislative Measures for Internal Security

AFSPA — Armed Forces (Special Powers) Act, 1958

Purpose: Grants special powers to the armed forces operating in areas declared "disturbed" — including the power to use force (even causing death) against those acting in contravention of law, to arrest without warrant, and to enter and search premises.
"Disturbed area": Declared by the Governor of a State or the Central Government when an area is in such a disturbed/dangerous condition that the use of armed forces is necessary.
Immunity: No prosecution of armed-forces personnel acting under the Act without prior sanction of the Central Government — the core of the controversy.
Controversy: Allegations of human-rights violations (e.g., the Manorama case, Pathribal); demands for repeal vs. the Army's view that operations need legal protection. The Justice Jeevan Reddy Committee (2005) recommended repeal/dilution; the Supreme Court has held there can be no blanket immunity for excesses.
Recent reductions: The government has progressively reduced the AFSPA footprint in the North-East — significant areas of Assam, Nagaland and Manipur have been removed from the "disturbed area" notification in recent years, reflecting improved security.

UAPA — Unlawful Activities (Prevention) Act, 1967

India's principal anti-terror law; allows banning of "unlawful associations" and "terrorist organisations."
2019 amendment: Empowered the government to designate individuals (not just organisations) as terrorists, and gave the NIA powers over property seizure in terror cases. Criticised for stringent bail provisions and prolonged pre-trial detention.

NSA — National Security Act, 1980

A preventive detention law allowing detention to prevent a person from acting prejudicially to national security or public order, for up to 12 months, subject to Advisory Board review.
Concerns: potential misuse, detention without normal trial safeguards, and tension with Article 22 protections.

Balance theme: Every security law walks a tightrope between national security and civil liberties. The exam-ready position: such laws are necessary but must be tightly defined, time-bound, judicially reviewable and used proportionately to survive constitutional scrutiny.

5. National Security Committees & Reform Reviews

Kargil Review Committee (1999)

Set up after the 1999 Kargil conflict under K. Subrahmanyam (with Lt Gen K.K. Hazari, B.G. Verghese and Satish Chandra) to examine the intelligence and operational failures that allowed the intrusion.
It exposed serious intelligence coordination failures and a lack of integrated assessment.
Its recommendations led to the creation of NTRO (technical intelligence), the Defence Intelligence Agency (DIA), strengthening of the MAC, and the eventual push for a Chief of Defence Staff and integrated tri-service commands.

Group of Ministers (GoM) 2001

Constituted to review the national security system in light of the Kargil Committee report; chaired by then Home Minister L.K. Advani.
Set up four task forces — on intelligence, internal security, border management and defence management. Recommended a CDS, multi-agency intelligence coordination, and comprehensive border-management reforms (one-force-one-border principle).

Naresh Chandra Committee (2011–12)

A task force on national security that reviewed progress on earlier reforms; recommended a permanent Chairman of the Chiefs of Staff Committee as an interim step toward a CDS, greater civil-military integration and intelligence reforms.

Linkage to remember: Kargil (1999) → GoM (2001) → Naresh Chandra (2012) → finally the CDS (2019). Two decades of committees converged on the same goals: jointness, integration and reform of intelligence.

6. National Security Architecture

At the apex sits a structured decision-making system, set up in 1998–99, to give national security strategic, coordinated direction.

National Security Council (NSC): The apex body for national-security and strategic-interest decisions, chaired by the Prime Minister. Members include the Ministers of Defence, Home, External Affairs and Finance, and the NSA.
National Security Adviser (NSA): The chief executive of the NSC system and the PM's principal adviser on national security; oversees the intelligence apparatus, including NTRO, and is the key interlocutor in strategic diplomacy (e.g., border talks with China).
Strategic Policy Group (SPG): The principal mechanism for inter-ministerial coordination and integration of inputs; now chaired by the NSA, it includes the Cabinet Secretary, the three Service Chiefs, the CDS, intelligence heads and key secretaries.
National Security Advisory Board (NSAB): A body of non-official experts (academics, ex-diplomats, ex-military, ex-bureaucrats) that provides long-term analysis and policy recommendations to the NSC.
National Security Council Secretariat (NSCS): The administrative backbone supporting the NSC.

DMA, CDS & Theaterisation

Chief of Defence Staff (CDS): Created in 2019 (first CDS: General Bipin Rawat) as the single-point military adviser to the government and Permanent Chairman, Chiefs of Staff Committee.
Department of Military Affairs (DMA): A new department in the Ministry of Defence headed by the CDS, mandated to promote jointness in procurement, training and staffing, and to facilitate the restructuring of commands into theatre commands.
Theaterisation: The flagship reform to reorganise the existing 17 single-service commands into a smaller number of integrated theatre commands (e.g., a Northern/China-facing, a Western/Pakistan-facing, and a Maritime theatre), each under a single commander controlling assets of all three services for unified operations.

Operation Sindoor (May 2025) showcased the payoff of integration — coordinated tri-services precision strikes demonstrating the jointness that theaterisation aims to institutionalise.

Figure 3: India's apex national-security architecture — PM/NSC, NSA, SPG, NSAB, NSCS, and the CDS/DMA-led move toward theaterisation.

7. Military Modernisation & Indigenisation

A modern security architecture needs modern capabilities. India's drive combines self-reliance ("Atmanirbhar Bharat") with the absorption of emerging technologies.

Indigenisation: Under "Atmanirbhar Bharat in defence," the government has issued successive positive indigenisation lists (lists of items barred from import beyond a timeline) for both the Services and Defence PSUs, to build a domestic defence-industrial base. Defence exports have risen sharply.
Procurement reforms: Earmarking a large share of the capital budget for domestic procurement; the Defence Acquisition Procedure (DAP 2020) prioritises "Buy (Indian)."
Defence corridors: Two dedicated defence industrial corridors — in Uttar Pradesh and Tamil Nadu — to cluster manufacturing, MSMEs and startups.
iDEX (Innovations for Defence Excellence): A flagship platform engaging startups, MSMEs and innovators to co-develop defence technologies, supported by the Defence Innovation Organisation.
Emerging technologies: Drones and counter-drone systems, AI-enabled warfare, space and cyber capabilities. India has stood up the Defence Cyber Agency, the Defence Space Agency and the Armed Forces Special Operations Division as tri-service agencies — precursors to full functional commands.

Why it matters for security: Self-reliance reduces dependence on import supply chains (a strategic vulnerability), shortens response cycles, and supports the technology edge needed for grey-zone, drone and cyber threats highlighted across this syllabus.

Current Affairs Snapshot (up to June 2026)

Operation Sindoor (May 2025): Tri-services precision strikes after the Pahalgam attack demonstrated jointness and the operational rationale for theaterisation.
CDS & theatre commands: Continued work toward integrated theatre commands under the second CDS (Gen Anil Chauhan); the Inter-Services Organisation (Command, Control & Discipline) Act, 2023 gave commanders of joint formations disciplinary powers — a legal enabler for theaterisation.
Agnipath scheme: The short-service "Agniveer" recruitment model (from 2022) continues to reshape the manpower profile of the armed forces, amid debate on retention and pensions.
Defence indigenisation & exports: Fresh positive indigenisation lists and record defence exports reinforce the Atmanirbhar push; expanding iDEX engagement with startups.
NIA expansions: Continued use of extra-territorial jurisdiction (post-2019) and new branches to pursue terror-financing and trans-national networks.
AFSPA footprint reduced: Further de-notification of "disturbed areas" in parts of the North-East as security improves.
CAPF modernisation: Continued rollout of modern weapons, the CIBMS "smart fencing," and welfare measures (e.g., Ayushman CAPF) to address attrition and stress.

Previous Year Questions — Mains with Model Answer Structures MAINS

Mains-only — PYQs up to UPSC Mains 2025. Each model answer is a structured outline. Flesh out each point into 2–3 sentences in the exam. This is a Mains-only subject; only real, verified UPSC GS3 questions are listed below.

UPSC GS3 2020 15 marks · 250 words

Q. "The banning of 'Jamaat-e-Islami' in Jammu and Kashmir brought into focus the role of over-ground workers (OGWs) in assisting terrorist organizations. Examine the role played by OGWs in assisting terrorist organizations in insurgency affected areas. Discuss measures to neutralize the influence of OGWs."

Model Answer Structure

Intro: Define OGWs — local sympathisers providing logistics, shelter, recruitment and intelligence to terror outfits.
Roles played: Safe houses, courier of funds/arms, reconnaissance, radicalisation, legal/financial support, propaganda.
Why dangerous: Blend with civilians, hard to detect, sustain the terror ecosystem; bans (UAPA) target the support base.
Agency role: IB/MAC intelligence inputs, NIA prosecution, ED on terror-financing, CAPF/police ground action.
Measures: HUMINT and surveillance, choke financing, prosecution under UAPA, community engagement, de-radicalisation, denial of government benefits/jobs to OGWs.
Conclusion: Neutralising the OGW network — the "iceberg below the waterline" — is key to ending insurgency, requiring intelligence-led, rights-respecting action.

UPSC GS3 2013 10 marks · 200 words

Q. "How far are India's internal security challenges linked with border management, particularly in view of the long porous borders with most countries of South Asia and Myanmar?"

Model Answer Structure

Intro: India's long, varied and porous land/maritime borders directly shape internal security.
Linkages: Infiltration of terrorists (Pakistan border–BSF), illegal migration (Bangladesh–BSF), insurgent sanctuaries & arms (Myanmar–Assam Rifles), smuggling/trafficking (Nepal & Bhutan–SSB), LAC coercion (China–ITBP).
Force mapping: One-border-one-force principle assigning CAPFs to specific borders.
Challenges: Difficult terrain, free-movement regimes, unsettled boundaries, dual-use of borders by crime-terror nexus.
Measures: Fencing & CIBMS smart borders, integrated border management, border-area development, regional cooperation and coastal security post-26/11.
Conclusion: Border management and internal security are two sides of the same coin — a "comprehensive border management" approach is essential.

UPSC GS3 2018 15 marks · 250 words

Q. "Left Wing Extremism (LWE) is showing a downward trend, but still affects many parts of the country. Briefly explain the Government of India's approach to counter the challenges posed by LWE."

Model Answer Structure

Intro: Note the declining geographical footprint and casualties of LWE; still a serious internal-security challenge.
Security pillar: CRPF + CoBRA + state police joint operations; intelligence via MAC/SMAC; choking finances via NIA/ED.
Development pillar: Roads, telecom towers, schools, financial inclusion, Aspirational Districts, SAMADHAN/National Policy & Action Plan 2015.
Rights & rehabilitation: Surrender-and-rehabilitation policy, addressing tribal land/forest grievances (PESA, FRA).
Coordination: Centre–State synergy, capacity building of state police, modernisation.
Conclusion: A balanced "security + development + rights" approach explains the downward trend; sustaining it needs governance penetration.

UPSC GS3 2017 15 marks · 250 words

Q. "The North-Eastern region of India has been infested with insurgency for a very long time. Analyze the major reasons for the survival of armed insurgency in this region."

Model Answer Structure

Intro: The NE has seen prolonged ethnic and separatist insurgencies despite repeated peace efforts.
Reasons — external: Porous Myanmar border, cross-border sanctuaries, arms supply, historical external support.
Reasons — internal: Ethnic diversity & identity assertion, sense of neglect/under-development, illegal migration anxieties, governance deficits, AFSPA-related alienation.
Force response: Assam Rifles + Army counter-insurgency; the dual-control and AFSPA debate.
Way forward: Political dialogue (peace accords), border management, development, reduced AFSPA footprint, inclusive identity politics.
Conclusion: Survival of insurgency reflects a mix of geography, identity and governance; durable peace needs a holistic, dialogue-led approach.

⚡ Quick Revision

7 CAPFs (MHA): CRPF, BSF, CISF, ITBP, SSB, Assam Rifles, NSG
Intel: IB (internal), RAW (external), NTRO (tech), DIA (military)
Coordination: MAC, NATGRID
Investigation: NIA (terror, 2008), CBI (DSPE 1946)
Apex: NSC → NSA → SPG / NSAB; CDS → theaterisation

📌 Must-Know — 7 CAPFs

CRPF — largest · anti-Naxal · CoBRA
BSF — Pakistan & Bangladesh borders
CISF — industry, airports, metro
ITBP — China border (LAC)
SSB — Nepal & Bhutan
Assam Rifles — Myanmar/NE (MHA+Army)
NSG — counter-terror "Black Cats"

🏛️ Key Facts

IB: 1887 · MHA · internal · non-statutory
RAW: 1968 · Cabinet Sectt · external
NIA Act: 2008; amended 2019 (extra-territorial jurisdiction)
CBI: DSPE Act 1946; "caged parrot" (SC 2013)
AFSPA: 1958 · "disturbed area" · immunity clause
CDS: 2019 (Gen Bipin Rawat) + DMA

🧭 Committees → CDS

Kargil Review Committee 1999 (K. Subrahmanyam) → NTRO, DIA, MAC
GoM 2001 → 4 task forces; CDS recommended
Naresh Chandra 2012 → permanent CoSC chairman
Outcome 2019: CDS + theaterisation

✍️ Answer Keywords

Jointness & integration / theaterisation
"Caged parrot" · general consent withdrawal
Federal terror agency (NIA)
Security vs civil liberties balance
Atmanirbhar Bharat in defence · iDEX
Stovepiping & intelligence coordination