Governance, Compliance & Annexures

How the Centre of Excellence is measured, held to account, and kept inside national and international law.

Section 5

Monitoring & evaluation framework

Department-level KPIs, cross-cutting metrics, internal governance and external accountability — reviewed quarterly and audited annually.

5.1 Performance metrics

A. Department-specific KPIs

Department KPIs by phase
Department	Key metric	Phase I target	Phase III target
Border & Coastal Security	% reduction in infiltration attempts	20%	60%
Cybersecurity	Time to detect a data breach (hours)	48	12
Critical Infrastructure	Number of facilities with ISO 27001 certification	10	100
Disaster Resilience	Accuracy of early warning systems (%)	75%	95%
Startup Incubation	% of technologies adopted by agencies	30%	70%

B. Cross-cutting metrics

Interagency data sharing — % of agencies integrated into the National Security Data Fabric (30% → 90%).
Training impact — % of trainees promoted within two years (15% → 40%).
Public trust — annual survey scores on “perceived safety” (6/10 → 8.5/10).

5.2 Governance & oversight

A. Internal governance

Quarterly reviews by the COE Executive Council (BHS, NFSU, MHA).
Annual audits — independent third-party evaluation of labs, training, and finances.
Whistleblower portal — secure channel for reporting misuse of funds or data.

B. External accountability

Parliamentary oversight — annual presentation to the Standing Committee on Home Affairs.
Annual Security Report — published on MHA and COE websites.
Transparency portal — live dashboard showing project statuses (e.g. “Border AI Surveillance: 65% deployed”).

5.3 Feedback mechanisms

Stakeholder feedback channels and cadence
Stakeholder	Feedback channel	Frequency
Security Agencies	Post-training surveys + field performance data	Quarterly
Startups	Incubation progress reviews	Bi-annual
Citizens	Grievance redressal portal	24/7
International	Partnership effectiveness assessments	Annual

5.4 Risk management

Monitoring mechanisms and corrective action
Risk	Monitoring mechanism	Corrective action
Tech Obsolescence	Annual tech audit by DRDO	Budget reallocation for upgrades
Data Breaches	Real-time CERT-In alerts	Immediate isolation + forensic investigation
Agency Non-Compliance	MHA performance scorecards	Incentive penalties; leadership retraining
Funding Shortfalls	MHA performance scorecards	Incentive penalties; leadership retraining

Section 6

Legal & ethical compliance

Ensuring adherence to national and international standards across data privacy, human rights, international law and ethical governance.

6.1

Data privacy & security

Framework

Puttaswamy Judgment compliance — citizen data anonymisation in all COE operations.
ISO 27001 certification — mandatory for labs handling classified information.

Agencies involved

MeitY — approves data governance protocols.
CERT-In — conducts biannual cybersecurity audits.

6.2

Human rights safeguards

Protocols

Use of force guidelines — for CAPFs trained at the COE (UN Basic Principles on Use of Force).
Ethical AI charter — prohibits racial or religious profiling in surveillance algorithms.

Oversight

NHRC — annual review of COE training modules.
State Human Rights Commissions — monitor field deployments.

6.3

International law alignment

Key areas

UN Cybercrime Convention — adherence in cyber operations (Domains 7–9).
Geneva Protocol — restricts AI and technology use in conflict zones (e.g. J&K, Northeast).

Partners

ICRC — training on humanitarian law for NSG and CRPF.
INTERPOL — joint operations comply with extradition treaties.

6.4

Ethical governance

Advisory board

Members — retired Supreme Court judges, civil society representatives, tech ethicists.
Role — approve high-risk projects (e.g. facial recognition in public spaces).

Transparency measures

Public disclosure — redacted versions of SOPs published annually.
Whistleblower protection — secure channels for reporting ethical violations.

Section 8

Annexures & supporting documents

Complete 28-Domain Framework

Detailed breakdown with objectives and agencies for every domain.

Open Annexure A →

Draft BHS–NFSU Memorandum of Understanding (MoU)

Legal agreement outlining roles, responsibilities, and resource-sharing between BHS and NFSU.

Infrastructure usage (NFSU campus labs, training facilities).
Intellectual Property (IP) ownership for joint R&D projects.
Dispute resolution mechanisms.

Ethical AI Governance Charter

Framework for ethical AI and technology deployment in security operations.

Non-discrimination (no profiling by caste, religion, or ethnicity).
Transparency in algorithmic decision-making.
Citizen consent protocols for facial recognition systems.

Financial Projections & Budget Models

Five-year financial forecasts.

Phase-wise capital and operational expenditure.
Revenue streams (training fees, tech licensing).
CSR / private investment partnership models.

Stakeholder Engagement Matrix

Agency-specific collaboration plans and accountability metrics.

MHA, NSG, BSF, and state police engagement workflows.
International partnership roadmaps (INTERPOL, US DHS).

Technology & Lab Specifications

Technical blueprints for COE facilities.

Drone Testing Facility design (DRDO standards).
Cyber Range architecture (CERT-In guidelines).
IoT Security Lab equipment list.

Training Program Curricula

NFSU-accredited course outlines.

Counter-Terrorism Tactics (NSG collaboration).
Cyber Forensics (CERT-In certification).
Disaster Response Leadership (NDMA modules).

Risk Mitigation Playbook

Contingency plans for operational, financial, and reputational risks.

Data breach response protocols.
Agency non-compliance escalation matrix.

Legal Compliance Checklists

Step-by-step adherence guides.

Data Protection (Puttaswamy Judgment, DPDP Act).
International Humanitarian Law (Geneva Protocols).