CS Professional · December 2025 · Paper 4.4
CS Professional Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice December 2025: paper analysis
Our own analysis of the official paper, as of 12 October 2026. The questions and answers belong to ICSI; read them on ICSI's website.
Chapter-wise marks
Where the marks were in this paper (out of 100; internal-choice alternatives not double counted).
What each question tested
In our words, by question number. Open the official paper for the full question.
| Q | Marks | Tests | Chapter |
|---|---|---|---|
| 1(a) | 5 | Usefulness of AI-based intrusion detection for online operations and balancing automation with human oversight | Artificial Intelligence - Introduction and Basics |
| 1(b) | 5 | R&D strategies aligned with the National Cyber Security Policy 2013 to build national resilience | Regulatory Framework on AI, Cyber Security and Cyberspace |
| 1(c) | 5 | Intermediary Guidelines and Digital Media Ethics Code obligations relevant to platform compliance | Cyber Threats and Cyber Laws |
| 1(d) | 5 | Strategies to prepare for the proposed Digital India Act replacing the IT Act | Regulatory Framework on AI, Cyber Security and Cyberspace |
| 1(e) | 5 | Structured threat hunting to detect ransomware earlier and limit damage | Cyber Security |
| 2(a) | 5 | Supreme Court Aadhaar ruling on privacy and the balance between biometric technology and privacy rights | Data Analytics and Law |
| 2(b) | 5 | IT Rules 2021 duties of significant social media intermediaries, including monthly compliance reporting and grievance redressal | Cyber Threats and Cyber Laws |
| 2(c) | 5 | Cyber terrorism risk from platform vulnerabilities, analysed through reported Indian incidents | Cyber Threats and Cyber Laws |
| 2(d) | 5 | Role of firewalls and next-generation firewall features in network defence | Network Basics and Security |
| 2(e) | 5 | Legal framework for intermediary takedowns and free speech claims in judicial proceedings | Cyber Threats and Cyber Laws |
| 3(a) | 5 | Best practices for software security across the development lifecycle and patching | Softwares and Software Security |
| 3(b) | 5 | Choosing a cloud service model for on-demand infrastructure and its advantages | Internet and Other Technologies |
| 3(c) | 5 | Live forensics, order of volatility and risks of failing to capture volatile data | Cyber Crimes and Investigation Procedures |
| 3(d) | 5 | Remote recovery as part of cloud disaster recovery after a denial-of-service attack | Information Systems |
| 3(e) | 5 | Forensic software capabilities that preserve evidence integrity and admissibility | Cyber Crimes and Investigation Procedures |
| 4(a) | 5 | Why a bank board would consider blockchain to address reconciliation and transparency issues | Internet and Other Technologies |
| 4(b) | 5 | Governance safeguards and legal reviews before signing a blockchain vendor contract | Internet and Other Technologies |
| 4(c) | 5 | Key factors in designing a banking management information system | Management Information Systems - An Overview |
| 4(d) | 5 | Essential elements for implementing a complete information system in an organisation | Information Systems |
| 4(e) | 5 | Factors a chief information security officer must address to safeguard bank information security | Information Systems |
What stood out
- Every one of the 20 parts sits inside a long case study: four compulsory 25-mark cases with no internal choice.
- Cyber law and intermediary regulation carry heavy weight in Q1 and Q2: IT Rules 2021, the Digital Media Ethics Code, the Aadhaar privacy ruling, takedown and free speech issues and cyber terrorism.
- Digital forensics is tested practically in Q3 through live forensics, order of volatility and evidence integrity tools.
- Q4 shifts to information systems and emerging technology in banking: blockchain adoption, vendor contract safeguards, MIS design and CISO responsibilities.
- Pure AI content is light; AI appears mainly as an applied tool in cybersecurity rather than as AI regulation theory.
Practise the chapters that carried the marks
Cyber Threats and Cyber Laws, Internet and Other Technologies, Information Systems: study guides and practice questions in the CS Professional format.