On February 28, 2026, the Chief Justice of India (CJI), Surya Kant, delivered a keynote address at the National Forensic Sciences University (NFSU), positioning forensic science as a cornerstone of the modern legal system. He articulated that in an era dominated by digital transformation, the nature of crime has evolved, presenting new challenges like cyber intrusions, digital fraud, and identity manipulation. In this context, the CJI described forensic science as a "protective shield" that safeguards the integrity of justice by providing objective, verifiable facts. He underscored the immense responsibility of forensic experts, emphasizing that their work must be governed by strict ethical clarity to maintain public trust in the judicial process.
While not a new regulation, the CJI's speech signals a strong judicial endorsement for the deeper integration of digital forensics into legal proceedings in India. This perspective is crucial as India continues to develop its legal frameworks around digital evidence, privacy, and cybercrime, such as the Information Technology Act.
Key points from the address:
This high-level judicial commentary affects a broad range of organizations within India's legal and law enforcement ecosystem:
The CJI's statements are likely to have the following impacts:
For organizations operating in India, the key takeaway is the growing importance of maintaining forensically sound data and logs. In the event of a security incident or legal dispute, the ability to produce verifiable digital evidence will be critical.
Recommendations:
Chief Justice of India Surya Kant speaks at the convocation of the National Forensic Sciences University.

Cybersecurity professional with over 10 years of specialized experience in security operations, threat intelligence, incident response, and security automation. Expertise spans SOAR/XSOAR orchestration, threat intelligence platforms, SIEM/UEBA analytics, and building cyber fusion centers. Background includes technical enablement, solution architecture for enterprise and government clients, and implementing security automation workflows across IR, TIP, and SOC use cases.
Help others stay informed about cybersecurity threats
Every tactic, technique, and sub-technique used in this threat has been identified and mapped to the MITRE ATT&CK framework for consistent, actionable threat language.
Observables and indicators of compromise (IOCs) have been extracted and cataloged. Risk has been assessed and correlated with known threat actors and historical campaigns.
Detection rules, incident response steps, and D3FEND-aligned mitigation strategies are included so your team can act on this intelligence immediately.
Structured threat data is packaged as a STIX 2.1 bundle and can be visualized as an interactive graph — relationships between actors, malware, techniques, and indicators.
Sigma detection rules are derived from the threat techniques in this article and can be converted for deployment across any major SIEM or EDR platform.