Email Account and Website Security - DG, Systems Instructions
THE Directorate General of Systems has been receiving several communications from Indian Computer Emergency Response Team (CERT-in) relation to defacement of websites maintained at the local Commissionerate level and email accounts being compromised due to reasons like weak passwords.
DG, Systems cautions that website security should be an integral part of website maintenance contracts and it should be ensured that the websites are hosted on Indian servers only (eg., on NIC infrastructures.).
Regarding e-mail account security and password management, the DG had sent advisories from time to time. DG wants the Commissionerates to ensure the security of independently hosted websites under their jurisdiction and sensitise officers in respect of secure email account usage.