Internal security: insurgency, terrorism and Left-wing extremism

In short

Internal security is the state's task of maintaining order, authority and the constitutional writ inside its own borders against armed challenges that are not conventional inter-state war. In India it has three principal strands — ethno-nationalist insurgency (Northeast), terrorism (Jammu and Kashmir, urban mass-casualty attacks, cross-border jihadist networks) and Left-wing extremism (the CPI (Maoist) in the eastern tribal belt) — plus organised crime, communal violence and radicalisation that feed them. Public order and police are State subjects (Seventh Schedule List II, Entries 1 and 2) while defence, armed forces of the Union and Union agencies are Union subjects, so every response is a Centre-State coordination problem. The topic is core to Defence and Strategic Studies papers, UPSC Civil Services GS Paper III, CAPF (AC), state PSC and police SI examinations, and to interviews for CAPF, intelligence, defence-analyst, think-tank and risk-advisory roles.

Explained

Concepts and definitions

• Internal security: the condition in which the state's institutions function, laws are enforced and the citizen is safe from organised violence within national borders. It is distinguished from external defence by the adversary's location, not its sponsor.
• Insurgency: an organised, protracted armed movement by a section of the population seeking to seize political power, secede or force a change of regime, combining guerrilla violence with a political programme and a claim to represent a people. It contests sovereignty and legitimacy.
• Terrorism: the calculated use of violence, chiefly against non-combatants, to create fear and coerce a government or society into a political outcome. It targets an audience rather than an army; there is no universally agreed definition in international law, and India has pressed at the UN since 1996 for a Comprehensive Convention on International Terrorism (still not adopted).
• Left-wing extremism (LWE): armed revolutionary movement following Marxist-Leninist-Maoist doctrine, aiming to overthrow the Indian state through "protracted people's war" — mobilising the rural poor, building guerrilla zones and encircling the cities.
• Militancy, extremism, radicalisation: militancy denotes armed action; extremism an ideological position rejecting constitutional means; radicalisation the process by which an individual or group moves toward such a position (online and offline).
• Guerrilla warfare: a method (hit-and-run, small units, avoid pitched battle), not an ideology; used by insurgents and sometimes by regular forces.
• Hybrid threat: combining irregular violence, proxy funding, propaganda, lawfare and cyber/information operations below the threshold of war — the frame in which cross-border support to Indian insurgent groups is now analysed.
• Proxy war: a sponsor state's use of non-state armed groups to impose costs on a rival while denying responsibility.

Insurgency in India — theatres and classification

• Theatres: (1) the Northeast — ethno-nationalist and autonomy-seeking; (2) Jammu and Kashmir — separatist and jihadist, with cross-border sponsorship; (3) the LWE belt — class-based, pan-Indian in ambition; historically (4) Punjab (1980s to 1993) — successfully ended.
• Classification by objective: secessionist (demanding independence); autonomist (statehood, autonomous council, Sixth Schedule arrangements); irredentist (merger with a neighbouring territory or kin group); revolutionary/class-based (LWE); identity/communal.
• Northeast drivers: contested history of accession, ethnic heterogeneity and tribe-versus-tribe competition, migration and demographic anxiety, weak connectivity through the Siliguri corridor ("Chicken's Neck"), porous borders with Myanmar, Bangladesh, China and Bhutan, underdevelopment, and the 16 km Free Movement Regime along the Myanmar border (which the Government moved to end and replace with fencing and a permit system from 2024 — the regime's final shape has been revised in stages).
• Trajectory: the Naga movement (NSCN factions, Framework Agreement 2015, talks continuing without a final settlement), Mizoram (Mizo Accord 1986 — the model counter-insurgency political settlement), Assam (ULFA pro-talks faction agreement 2023; ULFA-Independent outside), Tripura and Bodo (Bodo Accord 2020), Meitei-Kuki ethnic violence in Manipur from May 2023 which is a law-and-order and ethnic conflict rather than classic insurgency, though armed groups exploit it.
• Instrument of settlement: surrender-cum-rehabilitation, suspension of operations (SoO) agreements, accords with constitutional guarantees, autonomous councils under the Sixth Schedule, and progressive withdrawal of AFSPA from "disturbed area" notifications — AFSPA coverage in the Northeast has shrunk sharply since 2015 and is now limited to specified districts/areas in Nagaland, Manipur, Arunachal Pradesh and Assam, reviewed periodically.

Terrorism — forms, financing and the Jammu and Kashmir theatre

• Forms: cross-border/jihadist (Lashkar-e-Taiba, Jaish-e-Mohammed and front organisations such as The Resistance Front and People's Anti-Fascist Front); ethno-nationalist terrorism; left-wing terrorism; right-wing/communal violence; narco-terrorism (drones and drug consignments across the Punjab and Jammu borders); state-sponsored proxy terrorism; cyber-enabled and lone-wolf attacks by self-radicalised individuals.
• Jammu and Kashmir phases: mass agitation and militancy from 1989-90; internationalised jihadist phase with foreign fighters; post-2010 "new age" phase of stone-pelting, social-media mobilisation and local recruitment; post-2019 (abrogation of Article 370, reorganisation into two Union Territories) with reduced organised militancy, emergence of hybrid terrorists (unlisted, part-time operatives who return to civilian life), targeted killings of minorities and migrant workers, and the April 2025 Pahalgam attack on tourists which triggered Operation Sindoor.
• Terror financing: hawala, fake Indian currency notes, charities and front NGOs, trade-based laundering, narcotics, crypto-assets. Institutions: the Financial Action Task Force (Pakistan was on its grey list 2018-2022), the Prevention of Money Laundering Act, 2002 with the Enforcement Directorate, FIU-IND for suspicious transaction reports, the Terror Funding and Fake Currency Cell of the NIA, and the Unlawful Activities (Prevention) Act, 1967 (UAPA) Chapter on terrorist funding.
• Radicalisation: push factors (humiliation, relative deprivation, state excess, identity threat) and pull factors (ideology, belonging, status, money, online recruitment). Counter-radicalisation and de-radicalisation programmes are run by state police (Maharashtra, Kerala, Telangana, Jammu and Kashmir) and schools/clerical bodies; there is no single national statute on de-radicalisation.

Left-wing extremism — origin, structure, doctrine, decline

• Origin: the 1967 Naxalbari peasant uprising (West Bengal) led by Charu Majumdar and Kanu Sanyal; CPI (ML) formed 1969; fragmentation through the 1970s-80s into the People's War Group (Andhra Pradesh) and the Maoist Communist Centre (Bihar-Jharkhand); their merger on 21 September 2004 created the CPI (Maoist), banned as a terrorist organisation under UAPA.
• Strategy — protracted people's war (adapted from Mao): build a mass base, create guerrilla zones, convert them into liberated/base areas, form a People's Liberation Guerrilla Army (PLGA), and encircle the cities. The "Red Corridor" or Compact Revolutionary Zone was envisaged from Nepal through Bihar-Jharkhand-Odisha-Chhattisgarh to Andhra Pradesh.
• Structure: Politburo and Central Committee at the top; Special Zonal/Regional Bureaux; State Committees; Divisional, Area and Village-level committees; Dalams (armed squads), Military/Special Guerrilla Companies and Battalions; Jan militia and Sangham at village level; and front organisations for urban work ("urban perspective" document) in student, labour, civil-liberties and cultural spaces.
• Drivers: denial of forest rights and tribal land alienation, displacement by mining and large projects, failure of land reform, moneylender and contractor exploitation, absent governance in interior blocks, excesses by police and security forces, and tendu leaf/forest-produce economy extortion. Funding: extortion/"levy" from contractors, mining and transporters, protection money, and opium/ganja in some pockets.
• Decline — measured: LWE violence has fallen roughly 70-80% from its 2010 peak and the number of affected districts has fallen from 126 (in 2013-14 reckoning) to a far smaller set — the Government has repeatedly reduced the list of "Most LWE-affected" districts (now a few dozen for Security Related Expenditure and under ten "most affected"), and declared a target of ending LWE by 31 March 2026; several senior Central Committee members have been killed or surrendered in 2024-26 operations in the Abujhmad-Bijapur-Sukma theatre. Exact district counts and casualty figures are revised each year in the Ministry of Home Affairs Annual Report, so quote the year with the number.
• What worked: the Greyhounds model of specialised, locally recruited, intelligence-led small-team operations (Andhra Pradesh, now replicated as CoBRA, STF Chhattisgarh, SOG Odisha, Jharkhand Jaguar); road and mobile-tower connectivity; surrender-and-rehabilitation policies; forest-rights and welfare delivery; and the SAMADHAN doctrine (2017): Smart leadership, Aggressive strategy, Motivation and training, Actionable intelligence, Dashboard-based KPIs and KRAs, Harnessing technology, Action plan for each theatre, No access to financing.
• What failed: Salwa Judum — the state-backed civilian vigilante militia in Chhattisgarh, held unconstitutional in *Nandini Sundar v. State of Chhattisgarh* (Supreme Court, 2011), which ordered disbanding of SPOs used in combat. Arming civilians transfers the state's monopoly on force and creates a cycle of revenge.

Legal and institutional framework

• UAPA, 1967 (amended 2004, 2008, 2012, 2019): defines "unlawful activity", "terrorist act", "terrorist organisation" (Schedule) and "terrorist gang"; allows designation of individual terrorists (2019 amendment); permits 30 days' police custody and up to 180 days' investigation; bail is restricted (court must be satisfied accusation is not prima facie true); NIA empowered to attach property with DG's approval. Succeeded the lapsed TADA (1985-1995) and repealed POTA (2002-2004).
• National Investigation Agency Act, 2008 (post-26/11 Mumbai attacks; amended 2019): NIA investigates Scheduled Offences with extra-territorial jurisdiction; NIA (Special Courts); the 2019 amendment added human trafficking, counterfeit currency, cyber-terrorism and arms-trade offences.
• Armed Forces (Special Powers) Act, 1958 (and the 1990 J&K Act): applies only in an area notified "disturbed"; empowers a commissioned/warrant officer to use force even causing death against a person contravening prohibited orders, arrest and search without warrant, destroy fortified positions; section 6 bars prosecution without Central Government sanction. Upheld in *Naga People's Movement of Human Rights v. Union of India* (1997) with guidelines; Jeevan Reddy Committee (2005) recommended repeal and transfer of powers to UAPA; *Extra Judicial Execution Victim Families Association v. Union of India* (2016) held that AFSPA does not confer immunity for excessive or retaliatory force and that every death must be investigated.
• National Security Act, 1980: preventive detention up to 12 months; Article 22(4)-(7) safeguards with an Advisory Board.
• Other instruments: Bharatiya Nyaya Sanhita, 2023 (which replaced the Indian Penal Code) — it now carries a terrorist-act offence and the offences of sedition-replacement, acts endangering sovereignty, unity and integrity of India; Bharatiya Nagarik Suraksha Sanhita, 2023 replaced the CrPC; Arms Act, 1959; Explosive Substances Act, 1908; PMLA, 2002; Information Technology Act, 2000 (section 69A blocking); Weapons of Mass Destruction Act, 2005; and state public-security Acts (Maharashtra, Chhattisgarh, Telangana, Odisha).
• Institutions: Ministry of Home Affairs (Internal Security Divisions I and II, LWE Division, Naxal Management Division); Intelligence Bureau (internal intelligence, nodal for the Multi-Agency Centre, MAC, created after Kargil); RAW (external); NATGRID (linking 21 databases to 10 user agencies); NCRB, NCTC (proposed after 26/11, never operationalised owing to federal objections); NSG, CAPFs — CRPF (with CoBRA for jungle warfare), BSF, ITBP, CISF, SSB, Assam Rifles; State police, intelligence and specialised units; National Security Council with the NSA, Strategic Policy Group and National Security Advisory Board; DGP-level conferences; Unified Commands in Assam, Manipur and J&K.
• Schemes: Security Related Expenditure (SRE) scheme, Special Infrastructure Scheme, Fortified Police Stations, Road Requirement Plan-I and the Road Connectivity Project for LWE Areas, Aspirational Districts Programme, Civic Action Programme, Modernisation of Police Forces, CCTNS and the ICJS, and skilling schemes (ROSHNI, Eklavya Model Residential Schools in tribal blocks).

Counter-insurgency and counter-terrorism doctrine

• Core principle: insurgency is a political problem with a military dimension; the aim is to restore legitimacy, not to maximise kills. The population, not the terrain, is the objective — "winning hearts and minds".
• The "clear-hold-build" sequence: clear an area of armed cadre, hold it with police/CAPF and fortified posts, then build governance, roads, schools, health and livelihoods so the vacuum does not return.
• Indian doctrinal statements: the Army's Doctrine for Sub-Conventional Operations (2006) — minimum force, good faith, people-friendly operations, no use of air power or heavy weapons against own citizens; "iron fist in a velvet glove"; the Rashtriya Rifles and Assam Rifles as dedicated CI forces; Sadbhavana (Army civic action in J&K).
• Counter-terrorism grid in J&K: Line of Control anti-infiltration obstacle system and counter-infiltration grid; hinterland Rashtriya Rifles grid; cordon and search operations (CASO), Operation All Out (2017) against listed commanders; Unified Headquarters for inter-agency coordination.
• Intelligence-led policing: HUMINT from local sources, TECHINT and SIGINT, financial intelligence, open-source and social-media monitoring; fusion at the MAC/SMAC; actionable intelligence with a short decision cycle is the single best predictor of operational success.
• Non-kinetic lines of effort: surrender and rehabilitation packages (stipend, vocational training, incentive for weapons surrendered — amounts set by state policy and revised), political dialogue and accords, development saturation, implementation of the Forest Rights Act, 2006 and PESA, 1996, local-language media, and strategic communication to contest the insurgent narrative.
• Limitations and critiques: collateral harm and allegations of fake encounters erode legitimacy; prolonged special powers normalise exception; low conviction rates and long UAPA pre-trial detention raise rights concerns; police shortages (large vacancies against sanctioned strength) and poor police-population ratio; Padmanabhaiah (2000), Malimath (2003) and Second Administrative Reforms Commission 5th Report, "Public Order" (2007) reform proposals remain largely unimplemented; *Prakash Singh v. Union of India* (2006) directives on police autonomy (State Security Commission, fixed DGP tenure, Police Establishment Board, separation of investigation from law and order) are only partly complied with.

Key points

• Internal security - protection of the state's writ and the citizen's safety against organised violence inside national borders.
• Insurgency vs terrorism - insurgency seeks to hold territory and political power with a mass base; terrorism seeks coercion through fear and needs no territory.
• Federal structure - police and public order are State subjects (List II), so the Centre acts through CAPFs, central agencies, funding schemes and advisories.
• CPI (Maoist) - formed 21 September 2004 by merger of PWG and MCC; banned under UAPA; strategy of protracted people's war.
• Red Corridor - the envisaged contiguous zone from Nepal to Andhra Pradesh; never achieved as a liberated area.
• SAMADHAN - the 2017 MHA LWE doctrine: eight elements from Smart leadership to No access to financing.
• Greyhounds model - locally recruited, specially trained small teams on precise intelligence; the template for CoBRA and state SOGs.
• Salwa Judum - state-backed vigilantism struck down in *Nandini Sundar* (2011); arming civilians is a doctrinal error.
• UAPA, 1967 - principal anti-terror law; 2019 amendment allows designating individuals as terrorists and NIA property attachment.
• NIA Act, 2008 - created after 26/11; central agency for Scheduled Offences with extra-territorial reach; expanded in 2019.
• AFSPA, 1958 - operates only in a notified "disturbed area"; section 6 requires Central sanction to prosecute; coverage in the Northeast has shrunk substantially since 2015.
• NSA, 1980 - preventive detention up to 12 months, with Article 22 Advisory Board safeguards.
• MAC and NATGRID - post-Kargil intelligence fusion and post-26/11 database linkage; NCTC was proposed but never set up.
• Hybrid terrorist - unlisted part-time operative in J&K who executes an attack and returns to civilian life, defeating conventional order-of-battle tracking.
• Clear-hold-build - the only sequence that converts tactical success into permanent security; "hold" is where India has historically failed.
• Political settlement works - Mizo Accord 1986, Bodo Accord 2020, Tripura and ULFA pro-talks agreements; Punjab militancy ended by policing plus politics.
• Terror financing - hawala, FICN, narcotics, crypto; countered through PMLA/ED, FIU-IND, FATF pressure and UAPA Chapter on funding.
• Root-cause instruments - Forest Rights Act 2006, PESA 1996, Aspirational Districts, road and telecom connectivity in LWE blocks.

Formulas and examples

Example 1 — Force-to-population requirement. An LWE-affected district has a population of 8,00,000 in the affected blocks. Applying the 20 per 1,000 counter-insurgency benchmark: 8,00,000 ÷ 1,000 = 800 units of 1,000 people; 800 × 20 = 16,000 personnel. At 25 per 1,000 the requirement is 800 × 25 = 20,000. If 6 CRPF battalions of 1,000 each plus 4,000 state police are deployed, strength = 6,000 + 4,000 = 10,000, i.e. a shortfall of 6,000 (37.5%) against the lower benchmark. Inference: either the "clear" phase must be sequenced block by block, or holding will fail.

Example 2 — Police-population ratio. A State has an actual police strength of 1,10,000 for a population of 7.5 crore. Ratio = (1,10,000 ÷ 7,50,00,000) × 1,00,000 = 146.7 per lakh. To reach 200 per lakh it needs 7.5 crore ÷ 1,00,000 × 200 = 750 × 200 = 1,50,000, i.e. 40,000 additional personnel — about 36% growth. Recruitment of 8,000 a year with 3,000 annual retirements gives a net 5,000 a year, so 8 years to close the gap. Inference: force expansion is a decade-scale project; technology and intelligence multipliers act faster.

Example 3 — Violence trend and legitimacy. A theatre records: Year 1 — 1,000 incidents, 600 civilian deaths, 150 security-force deaths, 300 insurgents neutralised. Year 5 — 250 incidents, 120 civilian deaths, 40 security-force deaths, 200 insurgents neutralised.

• Change in incidents = ((250 − 1,000) ÷ 1,000) × 100 = −75%.
• Civilian harm share, Year 1 = 600 ÷ (600 + 150 + 300) = 600 ÷ 1,050 = 57.1%; Year 5 = 120 ÷ (120 + 40 + 200) = 120 ÷ 360 = 33.3%.
• Exchange ratio, Year 1 = 300 ÷ 150 = 2.0; Year 5 = 200 ÷ 40 = 5.0.
• Inference: violence down three-quarters, exchange ratio up 2.5 times and civilian harm share down 24 percentage points — operations have become more precise and better accepted. A falling incident count with a *rising* civilian share would instead signal a legitimacy crisis.

Example 4 — Surrender policy as a force multiplier. In one year a district records 120 cadre neutralised, 60 arrested and 220 surrendered. Surrender rate = 220 ÷ (220 + 120 + 60) = 220 ÷ 400 = 55%. If the rehabilitation package is ₹5,00,000 per surrendered cadre (states set and revise their own amounts), outlay = 220 × ₹5,00,000 = ₹11 crore. Compared with the cost of an extended kinetic campaign against 220 armed cadre, this is the cheaper and politically more durable route — and each surrender yields intelligence that lowers future casualties.

Where it is used

• Central Armed Police Forces and Army: operational planning in CRPF/CoBRA, Assam Rifles and Rashtriya Rifles; Assistant Commandant and officer-cadre selection and promotion examinations test exactly this syllabus.
• Police and intelligence services: IPS and State police internal-security desks, Special Branch, Anti-Terrorism Squads (Maharashtra ATS, Gujarat ATS, Telangana), IB and State intelligence; investigation under UAPA and NIA Act; CCTNS and ICJS data work.
• Policy and administration: MHA LWE and Internal Security Divisions, district administration in Aspirational and LWE districts implementing SRE, Road Requirement Plan and Forest Rights Act delivery.
• Research and analysis: IDSA/MP-IDSA, CLAWS, ORF, Takshashila, Institute for Conflict Management (South Asia Terrorism Portal) — conflict datasets, annual violence reviews and doctrine studies; academic posts in Defence and Strategic Studies departments.
• Corporate and infrastructure risk: security risk assessment for mining, steel, power, telecom tower and road projects in LWE districts; CISF-protected installations; business continuity and extortion-risk advisory; insurance underwriting of terrorism cover.
• Compliance and finance: banks, NBFCs and payment firms running AML/CFT programmes under PMLA and FIU-IND reporting, and sanctions/UAPA-designation screening.

Interview questions

• Q: How does insurgency differ from terrorism? A: Insurgency is an organised political-military movement with a mass base that seeks to control territory and replace or secede from the state; terrorism is a method that uses violence against civilians to coerce, and needs neither territory nor popular support.
• Q: Why is internal security a Centre-State coordination problem in India? A: Police and public order are State subjects under List II of the Seventh Schedule, while the armed forces of the Union, CAPFs and central agencies are Union subjects, so the Centre can fund, advise and deploy but the States must execute.
• Q: What did the 2019 UAPA amendment change? A: It allowed the Central Government to designate individuals — not only organisations — as terrorists, and empowered an NIA officer to attach property connected with terrorism with the approval of the Director General of the NIA.
• Q: Is AFSPA applicable across the whole Northeast? A: No. It applies only where the Governor or the Central Government notifies an area as "disturbed"; those notifications have been progressively withdrawn since 2015 and now cover specified districts or areas in Nagaland, Manipur, Arunachal Pradesh and Assam.
• Q: What was held in the Salwa Judum case? A: In *Nandini Sundar v. State of Chhattisgarh* (2011) the Supreme Court held that arming poorly trained tribal youth as Special Police Officers for counter-insurgency combat violated Articles 14 and 21, and ordered the practice stopped and the groups disarmed.
• Q: Why is the Greyhounds model considered the most successful Indian counter-LWE force? A: It recruited locally, trained for sustained jungle operations in small teams, acted only on specific intelligence, and operated with its own command chain — producing high precision and low collateral damage, which is why CoBRA and state SOGs copied it.
• Q: What is a "hybrid terrorist" and why is it difficult to counter? A: An unlisted, part-time operative in Jammu and Kashmir who carries out an attack with a locally passed weapon and resumes normal civilian life; because he is on no order-of-battle list, conventional cadre tracking and profiling do not detect him.
• Q: Does development alone end Left-wing extremism? A: No. Development removes grievance and recruitment supply, but armed cadre first have to be denied freedom of movement; the working sequence is clear-hold-build, where security creates the space in which development can actually be delivered.
• Q: Why was the NCTC never set up? A: Several States objected that locating it under the Intelligence Bureau with powers of arrest and search would intrude on police and public order, which are State subjects; the proposal remains in abeyance.
• Q: Which agencies handle intelligence fusion for internal security? A: The Intelligence Bureau runs the Multi-Agency Centre with Subsidiary MACs in States for daily sharing; NATGRID links identified databases to designated user agencies; FIU-IND and the ED supply financial intelligence.
• Q: What are the main sources of terror and insurgent financing in India, and how are they attacked? A: Hawala, fake currency, narcotics, extortion and levy, misused charities and crypto-assets; countered through PMLA investigations by the ED, FIU-IND reporting, the NIA's terror-funding cell, FATF standards and the UAPA funding provisions.
• Q: Name the political settlements that actually ended an Indian insurgency. A: The Mizo Accord of 1986 (the clearest success), the Punjab resolution in the early 1990s through policing plus restored politics, the Bodo Accord of 2020, the Tripura accords and the 2023 agreement with the pro-talks ULFA faction.

Common mistakes

• Using "insurgency", "terrorism" and "extremism" interchangeably — examiners test precisely the distinction in aim, mass base and relation to territory.
• Writing that AFSPA applies to a whole State automatically; it operates only on a "disturbed area" notification, and coverage has been reduced repeatedly since 2015.
• Confusing the agencies: the IB is internal and does not have police powers of arrest, RAW is external, the NIA investigates and prosecutes, and the NSG is a strike and hostage-rescue force.
• Quoting old violence statistics or district counts without the year — LWE affected-district lists and casualty figures are revised in every MHA Annual Report.
• Treating the Manipur violence from 2023 as a classic insurgency; it is primarily ethnic conflict and a breakdown of order, though armed groups exploit it.
• Presenting development as the whole answer (or force as the whole answer); exam answers score on the two-track clear-hold-build logic with the political settlement as the end state.
• Citing repealed laws as current — TADA lapsed in 1995, POTA was repealed in 2004, and the IPC and CrPC have been replaced by the Bharatiya Nyaya Sanhita, 2023 and the Bharatiya Nagarik Suraksha Sanhita, 2023; also mixing up the Naxalbari uprising (1967) with the formation of the CPI (Maoist) (2004).

Related topics

• Border management and maritime security in the Indian Ocean · Nuclear strategy and India's nuclear doctrine · Disaster management · India's national security architecture and higher defence organisation · Sub-conventional and hybrid warfare · Centre-State relations and police reforms.