Contingency Management Plan

The NISE website must be available to users at all times. The Contingency Management Plan defines actions to be taken in the event of defacement, data corruption, hardware/software failure and natural disasters, so that the website is restored in the shortest possible time.

8.1 Defacement of Website

The website is monitored continuously to detect any defacement. In case of defacement, the following actions are taken:

1. The person noticing the defacement immediately informs the IT Head and the Web Information Manager by phone and e-mail.

2. The website is blocked/taken offline (fully or partially, depending on the degree of defacement) and a maintenance page is displayed.

3. Log files are analysed to identify the source and nature of the attack; the vulnerability is identified and fixed.

4. The website is restored from the last clean backup after verification.

5. The incident is reported to CERT-In within 6 hours and the application is re-audited if required.

8.2 Data Corruption

Regular backups of website data are taken (daily incremental and weekly full backup) and stored at a separate location within NISE. In case of data corruption, the website is restored from the latest valid backup.

8.3 Hardware / Software Crash

In case the server hosting the website crashes, the website is restored on a standby server using the latest backup. The expected time to restore the website on another server is up to 24 hours.

8.4 Natural Disasters

In the event of a natural calamity which renders the data centre unusable, the website will be restored from the off-site backup at the Disaster Recovery (DR) location on the instruction of the IT Head / Web Information Manager.

8.5 Restoration Timelines

8.6 Contact Details for Emergencies