First Principles IASlearning from first principles

Internal security: meaning, framework and India's approach

Syllabus
Linkages between development and spread of extremism
As of
October 2026
  • internal security
  • public order
  • Article 355
  • Entry 2A of the Union List
  • development and security link
  • human security
  • Kautilya's four threats
  • hybrid threat
  • national security strategy
  • Multi Agency Centre
  • cooperative federalism
  • Operation Sindoor
  • people centric approach

The first principle

A state survives only if it keeps two promises to its citizens: that nobody else will rule them by force, and that daily life inside the country will run under law. The first promise is external security, guarded mainly by the armed forces at the frontier; the second is internal security, guarded mainly by the police and the courts. Internal security fails when some group decides that violence will get it what politics and law will not, and that decision usually grows where the state is weak, absent or unjust. So internal security is never only a matter of force; it is also a matter of governance, development and trust.

The core

What internal security covers

  • The working meaning. Internal security is the protection of the country's sovereignty, its constitutional order, public order and the safety of its people from threats that arise or operate inside its territory. There is no statutory definition in Indian law, so the meaning is read from the Constitution, the laws and the practice of the Ministry of Home Affairs (MHA).
  • Public order, law and order and internal security are three rings. Law and order covers individual crimes such as theft; public order covers disturbances that affect a community, such as a riot; internal security covers organised threats to the state itself, such as an armed insurgency. The Supreme Court described the three as concentric circles in Ram Manohar Lohia v State of Bihar (1966), with law and order the largest and the security of the state the smallest.
  • The main theatres. The MHA's annual reports describe the situation under recurring heads: Jammu and Kashmir, the North East, left wing extremism and terrorism in the hinterland, while cyber attacks, online radicalisation, drones, narcotics and terror financing cut across all of them.

Who is responsible

  • States hold the first line. Public order and police are State subjects (Entries 1 and 2 of the State List), so a district superintendent of police, not a Union ministry, is the first responder to almost every threat.
  • The Union holds the backstop. Article 355 makes it the duty of the Union to protect every State against external aggression and internal disturbance and to ensure that its government runs according to the Constitution. Entry 2A of the Union List, added by the Forty Second Amendment in 1976, lets the Union deploy its armed forces and Central Armed Police Forces (CAPFs) in a State in aid of the civil power.
  • Emergency powers are the last resort. Article 352 allows a national emergency on the ground of war, external aggression or armed rebellion; the Forty Fourth Amendment of 1978 replaced the vaguer words "internal disturbance" with "armed rebellion". Article 356 allows President's Rule when a State's government cannot be carried on according to the Constitution.
The Rapid Action Force contingent in blue camouflage at the Republic Day parade rehearsal, New Delhi, 2004
Photo: The Rapid Action Force, the wing of the Central Reserve Police Force (CRPF) trained for riots and communal tension, in its blue camouflage. Such central forces act in a State only in aid of its civil power, which keeps the State police in charge.Government of India, GODL-India, via Wikimedia Commons
  • Why extremism grows where it grows. The Planning Commission's Expert Group of 2008, on development challenges in extremist affected areas, found that left wing extremism had spread in tribal and forest districts marked by land alienation, displacement, forest laws that criminalised daily life and an absent administration. Grievance alone does not cause violence, but it supplies the recruits and the silent support that an armed group needs.
  • The cycle. Underdevelopment breeds grievance; an armed group turns grievance into violence; violence drives away teachers, contractors and officials; and their absence deepens underdevelopment. The state has to break the cycle at two points at once, by restoring security so that work can begin and by delivering development so that support for the armed group dries up.
  • Human security. The United Nations Development Programme's Human Development Report of 1994 defined security as freedom from fear and freedom from want, an idea India's approach to left wing extremism applies in practice.
Cycle in which underdevelopment, grievance, armed mobilisation, violence and the absence of the state feed each other, with two points where the state breaks itThe cycle of underdevelopment and violenceUnderdevelopmentno roads, schools, jobs;land and forest disputesBreak 2:development andrights (roads,schools, forestrights)Grievancedistrust of a distant,unfair stateArmed group mobilisesturns grievance intorecruits and silentsupportViolenceambushes, extortion,schools and roads blownupBreak 1:securityrestores access(camps, policestations)The state stays awayteachers, officials andcontractors leaveBreaking the loop needs both breaks at once: withsecurity alone, violence returns when forcesleave; development cannot start under fire.
Figure: The vicious cycle in which underdevelopment and violence feed each other, and the two points where the state breaks it.

India's approach without a written doctrine

  • No published doctrine. India has never published a national security strategy or an internal security doctrine of the kind the United States releases. The Defence Planning Committee, set up in 2018 under the National Security Adviser, was given the task of drafting a national security strategy among others, but none has been made public.
  • The approach that can be read from practice. Five principles recur across decades. Talks are offered to any group within the Constitution; force is used against those who take up arms, but it is the minimum needed and stays under civilian control; surrender and rehabilitation are always open; development and rights go with security; and the Union and the States act together.
  • A sharper posture against cross border terrorism. After the Pahalgam attack of 22 April 2025 and Operation Sindoor on the night of 6 to 7 May 2025, the Prime Minister's address of 12 May 2025 set out three positions: every terrorist attack will get a strong response on India's terms, India will not accept nuclear blackmail, and it will not treat terrorists and the governments that shelter them as separate.
Hierarchy of India's internal security architecture from the Constitution to the district, split between the Union and the StatesWho is responsible for internal securityConstitutionState List Entries 1 and 2: public order andpolice. Article 355: Union protects States.Union List Entry 2A (1976): central forces inaid of civil power.UnionMinistry of HomeAffairs; NSC and NSAadvise the PrimeMinisterStatesHome department;Director General ofPoliceUnion toolsCAPFs, IntelligenceBureau, NIA, armedforces when calledState toolsState police, armedpolice, special units,State intelligenceDistrictDistrict magistrate and superintendent ofpolice: the first respondersCoordination bodies: the Multi Agency Centre forintelligence, and joint commands in each theatre.
Figure: How responsibility for internal security is divided between the Union and the States, from the Constitution down to the district.

Dimensions

  • Political. Insurgencies in the North East began as demands for identity and autonomy and mostly ended in accords, which shows that a political grievance needs a political answer.
  • Economic. Extremism thrives where markets, banks and roads are absent, and it also feeds on extortion from mining, contracts and forest produce, so cutting off that money is as important as a military operation.
  • Social. Once communal or ethnic trust breaks, every rumour can trigger fresh clashes, so swift and impartial policing and fair relief matter as much as force.
  • Federal. States own the police but lack money and specialised forces, while the Union has the forces but not the local knowledge, so cooperation decides success; the left wing extremism campaign is the best example of joint planning.
  • External. Kautilya's Arthashastra sorted dangers to a state by whether they arise inside or outside and whether they are helped from inside or outside, and the same grid fits modern India: cross border terrorism needs local support, and some domestic insurgent groups have used camps across the border.
  • Technological. Encrypted messaging, cryptocurrency and drones lower the cost of violence; the technology itself is covered in the Science and Technology notes.
  • Rights. Special laws and long deployments carry the risk of excess, which alienates the very people the state needs on its side, so legality, accountability and respect for human rights are part of security, not a limit on it.
Two by two grid of threats sorted by whether they arise inside or outside India and whether support comes from inside or outside, after KautilyaKautilya's four kinds of threat, todayThreat arisesinsideoutsideSupportInternalleft wingextremismInternally aidedexternalcross borderterrorists usinglocal helpersinsideExternally aidedinternalinsurgent groupswith camps acrossthe borderExternalcyber attacks andpropaganda runfrom abroadoutsideRows: where support comes from. Gold boxes are thehybrid threats that need both police anddiplomacy.
Figure: Kautilya's grid of threats applied to India, with one example in each box.

In practice

  • Kargil Review Committee (1999) and the Group of Ministers (2001). The committee chaired by K Subrahmanyam found intelligence and coordination gaps, and the Group of Ministers' report on reforming the national security system led to the Multi Agency Centre in the Intelligence Bureau for sharing intelligence and to the Defence Intelligence Agency.
  • The Mumbai attacks of November 2008. Ten terrorists came by sea from Pakistan and attacked several sites over about three days. The lessons were coordination and speed, and they produced the National Investigation Agency (NIA) Act 2008, a stronger Unlawful Activities (Prevention) Act, regional hubs of the National Security Guard, the coastal security scheme and the plan for the National Intelligence Grid (NATGRID).
  • The Second Administrative Reforms Commission. Its Fifth Report (2007) asked for police reform, its Seventh Report (2008) stressed governance in conflict zones, and its Eighth Report on combating terrorism (2008) asked for a comprehensive anti terror law and a federal investigating agency.
  • Left wing extremism as proof of the combined approach. Districts affected by left wing extremism fell from 126 to none by March 2026, according to the MHA, after a decade of fortified police stations, roads and mobile towers in the same districts as security operations.
  • New criminal laws. The Bharatiya Nyaya Sanhita, in force from 1 July 2024, defines a terrorist act in Section 113 and organised crime in Section 111, bringing both into the general criminal law alongside the special anti terror law.
Timeline of eight turning points in India's internal security approach from 1999 to 2025Turning points in the security approach1999Kargil Review Committeeintelligence and coordination gapsexposed2001Group of Ministers reportMulti Agency Centre, DefenceIntelligence Agency2008Mumbai attacks (26/11)NIA Act, UAPA amended, NSG hubs,coastal security2016Uri attack, surgical strikescross border action against launchpads2019Pulwama attack, Balakot strikeair strike on a terror camp inPakistan2019Article 370 changesJammu and Kashmir and Ladakh madeUnion Territories2024Bharatiya Nyaya Sanhita in forceterrorist act and organised crime ingeneral law2025Pahalgam attack, Operation Sindoorterrorists and sponsors treatedalikeGold: the two attacks that changed the most, 26/11for institutions and Pahalgam for stated doctrine.
Figure: Eight turning points from 1999 to 2025 that changed how India organises its internal security, most of them prompted by an attack or a failure.

Issues and way forward

  • No written strategy. Without a published doctrine, policy shifts with each crisis and agencies lack shared priorities; a national security strategy, with an internal security chapter reviewed every few years, would give direction and allow Parliament to scrutinise it.
  • Weak State police. States carry the first line but have vacancies, old equipment and little training in investigation, which is why they lean on central forces; the reforms ordered in Prakash Singh v Union of India (2006) are covered in the police and security reforms note.
  • Overdependence on central forces. CAPFs deployed for years in one theatre lose training time and lack local knowledge; the answer is capable State police, with central forces as reserve.
  • Coordination gaps. Intelligence still flows unevenly between the Intelligence Bureau, State police and central agencies, and the Multi Agency Centre and NATGRID work only if States feed and use them.
  • Rights and trust. Excesses during operations hand armed groups a story to recruit with, so transparent inquiries and visible accountability protect the legitimacy of the forces.
  • Development delivered unevenly. Schools without teachers and clinics without doctors do not change lives; outcome based monitoring, as in the Aspirational Districts Programme, is the better test.

Common confusions

  • Internal and external security. External security deals with threats from other states across the frontier and is led by the armed forces and the Ministry of Defence; internal security deals with threats inside the country and is led by the police and the MHA, though cross border terrorism straddles both.
  • Article 355 and Article 356. Article 355 states the Union's duty to protect the States and lets it send help without taking over; Article 356 lets the President take over a State's government when it cannot run according to the Constitution.
  • Insurgency and terrorism. An insurgency seeks to control territory and people for a political goal and often has a local base; terrorism uses violence against civilians to spread fear and send a message, and it can be used by an insurgent group or by a network with no territory at all.

For the exam

  • Keyword bank: internal security, public order, Article 355, Entry 2A of the Union List, development and security link, human security, freedom from fear and want, Kautilya's four threats, hybrid threat, minimum force, Multi Agency Centre, NATGRID, cooperative federalism, national security strategy, people centric approach.
  • Previous year questions: Practise the previous year questions on this topic →
  • Use in an answer:
    • Introduction with data: Districts affected by left wing extremism fell from 126 to none by March 2026, according to the Ministry of Home Affairs, which shows that security and development work best when delivered together.
    • Introduction with a report: The Planning Commission's Expert Group of 2008 traced extremism to land alienation, displacement and an absent administration, placing the roots of insecurity in governance rather than in law and order alone.
    • Conclusion: India's internal security rests on a simple balance: firm force against those who take up arms, open doors for those who lay them down, and development and rights for the people in between.
    • Conclusion: A written national security strategy, capable State police and steady cooperation between the Union and the States would turn India's crisis driven responses into a settled doctrine.