Welcome to our official portal! Stay tuned on our Announcements Page. For any queries, contact us at our official channels.

You are here: Home | Website Security Policy

Website Security Policy

This Security Policy outlines the framework adopted by ICAR - National Institute of Veterinary Epidemiology and Disease Informatics (ICAR-NIVEDI) to protect its digital assets, information systems, and web content from unauthorized access, cyber threats, and vulnerabilities.

1. Objective

The objective of this policy is to define appropriate controls and guidelines to:

Ensure confidentiality, integrity, and availability of information.
Prevent unauthorized access, disclosure, or modification of data.
Maintain a secure online environment for users and stakeholders.

2. Access Control

Only authorized personnel are given access to the website back-end and servers.
Role-based access is enforced with proper authentication mechanisms.
Two-factor authentication (2FA) is used for administrative logins.
All user access is logged and reviewed periodically.

3. Network and Infrastructure Security

Firewalls and intrusion detection systems (IDS) are deployed.
Regular updates and patches are applied to all server software.
Secure SFTP and HTTPS protocols are enforced for all transactions.
An SSL certificate is installed to ensure encrypted and secure communication over the website.
Servers are hosted in secure data centers with restricted physical access.

4. Data Protection

Regular backups are taken and stored securely both onsite and offsite.
Database access is tightly controlled and encrypted where applicable.
Personal identifiable information (PII) is protected using best IT practices.

5. Web Application Security

Input validation is implemented to prevent SQL injection and XSS attacks.
Security scans and penetration tests are conducted periodically.
CMS and plug-ins are kept up-to-date to minimize vulnerabilities.

6. Incident Response

All security incidents are logged and reported to the Web Security Officer.
Response protocols are followed to contain, assess, and mitigate damage.
Post-incident analysis is conducted and corrective actions are implemented.

7. User Responsibilities

Users must not share login credentials or access confidential information without authorization.
Users are advised to use strong passwords and change them regularly.
Any suspicious activity must be reported immediately to the System Administrator/Web Information Manager.

8. Review and Compliance

This policy is reviewed annually and whenever significant changes occur. Non-compliance will be addressed with disciplinary or corrective actions as per institutional guidelines.

Last updated: May 2025

ಭಾರತೀಯ ಕೃಷಿ ಸಂಶೋಧನಾ ಪರಿಷತ್-ರಾಷ್ಟ್ರೀಯ ಪಶು ರೋಗ ಸೋಂಕುಶಾಸ್ತ್ರ ಮತ್ತು
ಮಾಹಿತಿ ವಿಜ್ಞಾನ ಸಂಸ್ಥೆ

भाकृअनुप–राष्ट्रीय पशुरोग जानपदिक एवं सूचना विज्ञान संस्थान

ICAR–National Institute of Veterinary Epidemiology and Disease Informatics