📄 GS Paper 3🎯 Mains Focus⏱ 18 min read📅 Updated June 2026
Why Security Forces & Architecture Matter
India's internal and external security is delivered not by a single body but by an ecosystem of armed forces, paramilitary and central armed police forces, intelligence agencies, investigation agencies and a national security decision-making architecture. The effectiveness of any counter-terror, counter-insurgency or border-management response depends on how well these organisations are mandated, resourced, modernised and coordinated.
From the Kargil intrusion of 1999 — which exposed intelligence and coordination failures — to the 26/11 Mumbai attacks of 2008 that birthed the NIA and NATGRID, every major security shock has reshaped this architecture. The 2019 creation of the Chief of Defence Staff (CDS) and the ongoing move toward theatre commands, demonstrated in Operation Sindoor (May 2025), mark the latest phase of reform toward jointness and integration.
Key distinction: The Indian Armed Forces (Army, Navy, Air Force) defend against external aggression under the Ministry of Defence. The Central Armed Police Forces (CAPFs) — wrongly called "paramilitary" — are under the Ministry of Home Affairs for internal security and border guarding. Intelligence agencies collect and assess; investigation agencies prosecute. Understanding these silos — and the need to bridge them — is the heart of this topic.
1. Security Forces under the Ministry of Home Affairs — CAPFs
The Central Armed Police Forces (CAPFs) are seven armed forces of the Union under the administrative control of the Ministry of Home Affairs (MHA). They handle internal security, counter-insurgency, border guarding, industrial security and VIP protection — freeing the Army for its primary external role.
The Seven CAPFs
CRPF (Central Reserve Police Force): The largest CAPF and the country's premier internal-security force. Deployed for anti-Naxal operations, J&K law and order, election duty and riot control. Its specialised jungle-warfare unit is CoBRA (Commando Battalion for Resolute Action); it also has the Rapid Action Force (RAF) for communal riots and the Commando battalion for women (Mahila).
BSF (Border Security Force): "First Line of Defence" — guards the international borders with Pakistan and Bangladesh during peacetime; first responder to infiltration and cross-border crime.
CISF (Central Industrial Security Force): Protects critical industrial undertakings, nuclear and aerospace installations, airports (aviation security), the Delhi Metro and government buildings; also offers consultancy security.
ITBP (Indo-Tibetan Border Police): Guards the India–China border (LAC) across high-altitude Himalayan terrain; a specialised mountaineering and high-altitude force.
SSB (Sashastra Seema Bal): Guards the open and porous borders with Nepal and Bhutan; focus on anti-smuggling, anti-trafficking and population engagement in border areas.
Assam Rifles: The oldest paramilitary force ("Sentinel of the North-East" / "Friends of the Hill People"); guards the India–Myanmar border and conducts counter-insurgency in the North-East. It has dual control — administrative control with MHA, operational control with the Indian Army (MoD).
NSG (National Security Guard): The elite "Black Cats" — a federal contingency force for counter-terrorism, counter-hijack and hostage rescue, raised after Operation Blue Star; deployed during 26/11.
Terminology tip: Strictly, India's only "paramilitary forces" are the Assam Rifles, the Special Frontier Force and the Indian Coast Guard (officered by the Army/Navy/Air Force). The MHA's seven forces are officially "Central Armed Police Forces (CAPFs)," not "paramilitary." Using the right term scores marks.
Issues with the CAPFs
Deployment & operational stress: Prolonged deployment in hostile theatres (Naxal belt, J&K), denial of leave, and family separation cause severe fatigue.
Attrition, suicides & fratricide: Rising voluntary retirements, resignations and a worrying number of suicides and fratricidal incidents linked to stress and grievance redressal gaps.
Cadre & leadership issues: Friction over deputation of IPS officers to top posts vs. promotion of cadre officers; demands for "Organised Group A Service" parity were partly settled by courts.
Modernisation gaps: Shortfalls in modern weapons, protective gear, surveillance and housing; the Modernisation Plan and "Smart" border-management systems (CIBMS) aim to fill these.
Welfare & pay: Disparities in risk/hardship allowance, the absence of OROP-type benefits, and housing satisfaction levels remain grievances.
Figure 1: The seven Central Armed Police Forces, their core mandates and the borders/domains they guard.
CAPFs at a Glance
Force
Core Role
Border / Domain
CRPF (+ CoBRA, RAF)
Largest CAPF; internal security, anti-Naxal, riot control, election duty
Internal / Left-Wing Extremism belt, J&K
BSF
"First Line of Defence"; peacetime border guarding, anti-infiltration
Pakistan & Bangladesh borders
CISF
Industrial, nuclear, aerospace & aviation security; PSU and metro security
Critical installations & airports
ITBP
High-altitude border guarding; mountaineering force
Counter-insurgency in NE; border guarding (dual MHA + Army control)
India–Myanmar border, North-East
NSG ("Black Cats")
Federal counter-terror, counter-hijack & hostage-rescue contingency force
Pan-India special operations
2. Intelligence Agencies
Intelligence is the first line of national defence. India's intelligence community is functionally split between internal and external collection, with technical and military verticals and coordination platforms layered on top.
Core Agencies
IB (Intelligence Bureau): India's oldest intelligence agency (1887), under the Ministry of Home Affairs. Handles internal/domestic intelligence — counter-terrorism, counter-intelligence, VIP threat assessment and inputs on insurgency and communal situations.
RAW (Research & Analysis Wing): India's external intelligence agency (created 1968 after the 1962 and 1965 wars), under the Cabinet Secretariat, reporting to the PMO. Focus on foreign HUMINT, covert action and strategic assessment of neighbours.
NTRO (National Technical Research Organisation): The premier technical intelligence agency (SIGINT, IMINT, cyber, satellite), set up after the Kargil Review Committee; works under the National Security Adviser.
DIA (Defence Intelligence Agency): Apex military intelligence body (raised 2002, post-Kargil) that integrates inputs from the Army, Navy and Air Force intelligence directorates under the Integrated Defence Staff.
MAC (Multi-Agency Centre): A 24x7 intelligence-sharing platform under the IB, created post-Kargil and strengthened post-26/11, to pool and disseminate terror-related intelligence across central and state agencies (with State Multi-Agency Centres — SMACs).
NATGRID (National Intelligence Grid): A post-26/11 IT backbone linking databases (immigration, banking, telecom, etc.) to give authorised agencies real-time, secure access for counter-terror investigations.
IB vs RAW (the classic distinction): IB = internal, under MHA, oldest. RAW = external, under Cabinet Secretariat/PMO, born 1968. Neither is created by a statute — both function under executive authority, a point critics raise on the demand for parliamentary oversight.
3. Investigation Agencies for National Security
Where intelligence agencies gather and assess, investigation agencies build cases and prosecute. Two are central to national security.
CBI (Central Bureau of Investigation)
India's premier investigating agency, set up under the Delhi Special Police Establishment (DSPE) Act, 1946; handles corruption, economic offences and special crimes, and important inter-state and national cases referred by courts/government.
"Caged parrot": The Supreme Court's 2013 description (in the coal-blocks case) of the CBI as a "caged parrot speaking in its master's voice" captured concerns over political interference and lack of functional autonomy.
General consent withdrawal: Because the CBI needs state consent to operate in a state (under the DSPE Act), several states have withdrawn "general consent", limiting the CBI to case-specific permissions — a federalism flashpoint.
Reform demands: a statutory charter, insulation from interference, and a transparent appointment of the Director (now via a committee of PM, Leader of Opposition and CJI).
NIA (National Investigation Agency)
India's central counter-terror investigation agency, created by the NIA Act, 2008 in the aftermath of the 26/11 Mumbai attacks; investigates scheduled offences relating to terrorism, terror financing, and threats to sovereignty.
It can suo-motu take up scheduled offences and investigate without prior state consent — a "federal agency" for terror.
NIA (Amendment) Act, 2019: Expanded its mandate to include human trafficking, counterfeit currency, manufacture/sale of prohibited arms, cyber-terrorism and offences under the Explosive Substances Act; allowed setting up of special NIA courts; and crucially gave it extra-territorial jurisdiction — power to investigate offences committed outside India affecting Indian interests/citizens.
Concerns: low conviction rate in some categories, potential overreach into the federal domain of "police" (a State subject), and resource constraints.
Exam framing: NIA = a dedicated federal terror agency (statutory, 2008). CBI = a general-purpose investigating agency under a 1946 Act needing state consent. The contrast — statutory vs non-statutory mandate, consent vs no-consent — is a favourite analytical hook.
Intelligence vs Investigation Agencies
Agency
Type
Parent / Statute
Core Mandate
IB
Intelligence (internal)
MHA · non-statutory (1887)
Domestic intelligence, counter-intelligence
RAW
Intelligence (external)
Cabinet Secretariat · 1968
Foreign intelligence, covert action
NTRO
Intelligence (technical)
Under NSA · post-Kargil
SIGINT, cyber, satellite imagery
MAC / NATGRID
Coordination / data grid
IB / MHA · post-26/11
Intelligence sharing & data linkage
CBI
Investigation
DSPE Act 1946 · needs consent
Corruption, economic & special crimes
NIA
Investigation (terror)
NIA Act 2008 (amended 2019)
Terrorism; extra-territorial jurisdiction
Figure 2: How intelligence agencies (IB, RAW, NTRO, DIA), coordination grids (MAC, NATGRID) and investigation agencies (NIA, CBI) interconnect.
4. Legislative Measures for Internal Security
AFSPA — Armed Forces (Special Powers) Act, 1958
Purpose: Grants special powers to the armed forces operating in areas declared "disturbed" — including the power to use force (even causing death) against those acting in contravention of law, to arrest without warrant, and to enter and search premises.
"Disturbed area": Declared by the Governor of a State or the Central Government when an area is in such a disturbed/dangerous condition that the use of armed forces is necessary.
Immunity: No prosecution of armed-forces personnel acting under the Act without prior sanction of the Central Government — the core of the controversy.
Controversy: Allegations of human-rights violations (e.g., the Manorama case, Pathribal); demands for repeal vs. the Army's view that operations need legal protection. The Justice Jeevan Reddy Committee (2005) recommended repeal/dilution; the Supreme Court has held there can be no blanket immunity for excesses.
Recent reductions: The government has progressively reduced the AFSPA footprint in the North-East — significant areas of Assam, Nagaland and Manipur have been removed from the "disturbed area" notification in recent years, reflecting improved security.
UAPA — Unlawful Activities (Prevention) Act, 1967
India's principal anti-terror law; allows banning of "unlawful associations" and "terrorist organisations."
2019 amendment: Empowered the government to designate individuals (not just organisations) as terrorists, and gave the NIA powers over property seizure in terror cases. Criticised for stringent bail provisions and prolonged pre-trial detention.
NSA — National Security Act, 1980
A preventive detention law allowing detention to prevent a person from acting prejudicially to national security or public order, for up to 12 months, subject to Advisory Board review.
Concerns: potential misuse, detention without normal trial safeguards, and tension with Article 22 protections.
Balance theme: Every security law walks a tightrope between national security and civil liberties. The exam-ready position: such laws are necessary but must be tightly defined, time-bound, judicially reviewable and used proportionately to survive constitutional scrutiny.
5. National Security Committees & Reform Reviews
Kargil Review Committee (1999)
Set up after the 1999 Kargil conflict under K. Subrahmanyam (with Lt Gen K.K. Hazari, B.G. Verghese and Satish Chandra) to examine the intelligence and operational failures that allowed the intrusion.
It exposed serious intelligence coordination failures and a lack of integrated assessment.
Its recommendations led to the creation of NTRO (technical intelligence), the Defence Intelligence Agency (DIA), strengthening of the MAC, and the eventual push for a Chief of Defence Staff and integrated tri-service commands.
Group of Ministers (GoM) 2001
Constituted to review the national security system in light of the Kargil Committee report; chaired by then Home Minister L.K. Advani.
Set up four task forces — on intelligence, internal security, border management and defence management. Recommended a CDS, multi-agency intelligence coordination, and comprehensive border-management reforms (one-force-one-border principle).
Naresh Chandra Committee (2011–12)
A task force on national security that reviewed progress on earlier reforms; recommended a permanent Chairman of the Chiefs of Staff Committee as an interim step toward a CDS, greater civil-military integration and intelligence reforms.
Linkage to remember: Kargil (1999) → GoM (2001) → Naresh Chandra (2012) → finally the CDS (2019). Two decades of committees converged on the same goals: jointness, integration and reform of intelligence.
6. National Security Architecture
At the apex sits a structured decision-making system, set up in 1998–99, to give national security strategic, coordinated direction.
National Security Council (NSC): The apex body for national-security and strategic-interest decisions, chaired by the Prime Minister. Members include the Ministers of Defence, Home, External Affairs and Finance, and the NSA.
National Security Adviser (NSA): The chief executive of the NSC system and the PM's principal adviser on national security; oversees the intelligence apparatus, including NTRO, and is the key interlocutor in strategic diplomacy (e.g., border talks with China).
Strategic Policy Group (SPG): The principal mechanism for inter-ministerial coordination and integration of inputs; now chaired by the NSA, it includes the Cabinet Secretary, the three Service Chiefs, the CDS, intelligence heads and key secretaries.
National Security Advisory Board (NSAB): A body of non-official experts (academics, ex-diplomats, ex-military, ex-bureaucrats) that provides long-term analysis and policy recommendations to the NSC.
National Security Council Secretariat (NSCS): The administrative backbone supporting the NSC.
DMA, CDS & Theaterisation
Chief of Defence Staff (CDS): Created in 2019 (first CDS: General Bipin Rawat) as the single-point military adviser to the government and Permanent Chairman, Chiefs of Staff Committee.
Department of Military Affairs (DMA): A new department in the Ministry of Defence headed by the CDS, mandated to promote jointness in procurement, training and staffing, and to facilitate the restructuring of commands into theatre commands.
Theaterisation: The flagship reform to reorganise the existing 17 single-service commands into a smaller number of integrated theatre commands (e.g., a Northern/China-facing, a Western/Pakistan-facing, and a Maritime theatre), each under a single commander controlling assets of all three services for unified operations.
Operation Sindoor (May 2025) showcased the payoff of integration — coordinated tri-services precision strikes demonstrating the jointness that theaterisation aims to institutionalise.
Figure 3: India's apex national-security architecture — PM/NSC, NSA, SPG, NSAB, NSCS, and the CDS/DMA-led move toward theaterisation.
7. Military Modernisation & Indigenisation
A modern security architecture needs modern capabilities. India's drive combines self-reliance ("Atmanirbhar Bharat") with the absorption of emerging technologies.
Indigenisation: Under "Atmanirbhar Bharat in defence," the government has issued successive positive indigenisation lists (lists of items barred from import beyond a timeline) for both the Services and Defence PSUs, to build a domestic defence-industrial base. Defence exports have risen sharply.
Procurement reforms: Earmarking a large share of the capital budget for domestic procurement; the Defence Acquisition Procedure (DAP 2020) prioritises "Buy (Indian)."
Defence corridors: Two dedicated defence industrial corridors — in Uttar Pradesh and Tamil Nadu — to cluster manufacturing, MSMEs and startups.
iDEX (Innovations for Defence Excellence): A flagship platform engaging startups, MSMEs and innovators to co-develop defence technologies, supported by the Defence Innovation Organisation.
Emerging technologies: Drones and counter-drone systems, AI-enabled warfare, space and cyber capabilities. India has stood up the Defence Cyber Agency, the Defence Space Agency and the Armed Forces Special Operations Division as tri-service agencies — precursors to full functional commands.
Why it matters for security: Self-reliance reduces dependence on import supply chains (a strategic vulnerability), shortens response cycles, and supports the technology edge needed for grey-zone, drone and cyber threats highlighted across this syllabus.
Current Affairs Snapshot (up to June 2026)
Operation Sindoor (May 2025): Tri-services precision strikes after the Pahalgam attack demonstrated jointness and the operational rationale for theaterisation.
CDS & theatre commands: Continued work toward integrated theatre commands under the second CDS (Gen Anil Chauhan); the Inter-Services Organisation (Command, Control & Discipline) Act, 2023 gave commanders of joint formations disciplinary powers — a legal enabler for theaterisation.
Agnipath scheme: The short-service "Agniveer" recruitment model (from 2022) continues to reshape the manpower profile of the armed forces, amid debate on retention and pensions.
Defence indigenisation & exports: Fresh positive indigenisation lists and record defence exports reinforce the Atmanirbhar push; expanding iDEX engagement with startups.
NIA expansions: Continued use of extra-territorial jurisdiction (post-2019) and new branches to pursue terror-financing and trans-national networks.
AFSPA footprint reduced: Further de-notification of "disturbed areas" in parts of the North-East as security improves.
CAPF modernisation: Continued rollout of modern weapons, the CIBMS "smart fencing," and welfare measures (e.g., Ayushman CAPF) to address attrition and stress.
Previous Year Questions — Mains with Model Answer Structures MAINS
Mains-only — PYQs up to UPSC Mains 2025. Each model answer is a structured outline. Flesh out each point into 2–3 sentences in the exam. This is a Mains-only subject; only real, verified UPSC GS3 questions are listed below.
UPSC GS3 2020 15 marks · 250 words
Q. "The banning of 'Jamaat-e-Islami' in Jammu and Kashmir brought into focus the role of over-ground workers (OGWs) in assisting terrorist organizations. Examine the role played by OGWs in assisting terrorist organizations in insurgency affected areas. Discuss measures to neutralize the influence of OGWs."
Model Answer Structure
Intro: Define OGWs — local sympathisers providing logistics, shelter, recruitment and intelligence to terror outfits.
Why dangerous: Blend with civilians, hard to detect, sustain the terror ecosystem; bans (UAPA) target the support base.
Agency role: IB/MAC intelligence inputs, NIA prosecution, ED on terror-financing, CAPF/police ground action.
Measures: HUMINT and surveillance, choke financing, prosecution under UAPA, community engagement, de-radicalisation, denial of government benefits/jobs to OGWs.
Conclusion: Neutralising the OGW network — the "iceberg below the waterline" — is key to ending insurgency, requiring intelligence-led, rights-respecting action.
UPSC GS3 2013 10 marks · 200 words
Q. "How far are India's internal security challenges linked with border management, particularly in view of the long porous borders with most countries of South Asia and Myanmar?"
Conclusion: Border management and internal security are two sides of the same coin — a "comprehensive border management" approach is essential.
UPSC GS3 2018 15 marks · 250 words
Q. "Left Wing Extremism (LWE) is showing a downward trend, but still affects many parts of the country. Briefly explain the Government of India's approach to counter the challenges posed by LWE."
Model Answer Structure
Intro: Note the declining geographical footprint and casualties of LWE; still a serious internal-security challenge.
Security pillar: CRPF + CoBRA + state police joint operations; intelligence via MAC/SMAC; choking finances via NIA/ED.
Development pillar: Roads, telecom towers, schools, financial inclusion, Aspirational Districts, SAMADHAN/National Policy & Action Plan 2015.
Coordination: Centre–State synergy, capacity building of state police, modernisation.
Conclusion: A balanced "security + development + rights" approach explains the downward trend; sustaining it needs governance penetration.
UPSC GS3 2017 15 marks · 250 words
Q. "The North-Eastern region of India has been infested with insurgency for a very long time. Analyze the major reasons for the survival of armed insurgency in this region."
Model Answer Structure
Intro: The NE has seen prolonged ethnic and separatist insurgencies despite repeated peace efforts.
Reasons — internal: Ethnic diversity & identity assertion, sense of neglect/under-development, illegal migration anxieties, governance deficits, AFSPA-related alienation.
Force response: Assam Rifles + Army counter-insurgency; the dual-control and AFSPA debate.
Way forward: Political dialogue (peace accords), border management, development, reduced AFSPA footprint, inclusive identity politics.
Conclusion: Survival of insurgency reflects a mix of geography, identity and governance; durable peace needs a holistic, dialogue-led approach.
Frequently Asked Questions
Why is Security Forces, Agencies & National Security Architecture important for UPSC 2027?
Security Forces, Agencies & National Security Architecture is part of Internal Security (GS Paper 3). It carries high weightage in Prelims (4/15 relevance) and Mains (4/10). Topic 12: CAPF, intelligence agencies, AFSPA, NSC, NSA, CDS, theaterisation
How should I prepare Security Forces, Agencies & National Security Architecture for UPSC Prelims?
Focus on factual clarity, PYQs, and CAPF, RAW, IB. Read this note once for structure, then revise with MCQ practice and current-affairs linkages for UPSC Prelims 2027.
How is Security Forces, Agencies & National Security Architecture asked in UPSC Mains?
Mains questions on Security Forces, Agencies & National Security Architecture often need analytical answers linking constitutional/statutory framework with examples. Use headings, diagrams, and recent developments while staying within GS Paper 3 syllabus scope.
What are the most important topics within Security Forces, Agencies & National Security Architecture?
How long does it take to complete Security Forces, Agencies & National Security Architecture notes?
Estimated reading time is 18 minutes. Allow 2–3 revision cycles and PYQ practice for exam-ready retention before UPSC 2027.
Which books should I refer along with these Security Forces, Agencies & National Security Architecture notes?
Pair these notes with standard references for Internal Security (NCERT/Laxmikanth/RS Sharma as applicable), previous year papers, and Mentors Daily test series for integrated Prelims + Mains preparation.