The digital era demands not only convenience but also resilience. In the context of governance, this translates into well-maintained, secure, and continuously accessible digital infrastructure. The recent directions issued by Jammu and Kashmir’s Chief Secretary regarding the revival of Government websites and web applications is a necessary, albeit long-overdue, reminder that compliance with cybersecurity protocols cannot be an afterthought. In an era where digital governance shapes the delivery of services and the face of administrative efficiency, the continued unavailability of Government websites – many of which have been offline for a significant period due to audit failures – is not only inconvenient but also unacceptable. There is a lack of compliance with essential cybersecurity audits and guidelines, including those mandated by CERT-In and OWASP. These frameworks are not ornamental-they are foundational. Their neglect compromises not just the safety of Government data but also the quality of service delivery to the citizens. As revealed in the CS meeting, over 110 departmental websites are still in various stages of the audit process, with only 45 nearing completion. While the intent is clear, the execution is faltering.
The consequences of this digital standstill are multifold. First, and most glaring, is the disruption in public service delivery. Many Government schemes, forms, and information portals remain inaccessible, leaving the common man in limbo. In J&K, where digital reach is crucial for people in far-flung areas, this blackout represents a governance vacuum. Services like electricity billing, grievance redressal, land records, and application tracking remain suspended or severely hampered. Citizens are either forced to make repeated physical visits or are left without any access at all. This scenario damages not only internal trust but also external perception in a Union Territory that aspires for better economic engagement and increased tourist influx.
Equally concerning is the lack of publicly accessible information for outsiders-business investors, tourists, researchers, and others-who rely on Government websites for credible data. The absence of digital visibility for departments, developmental policies, infrastructure status, and regulatory processes deters engagement and undermines transparency. It is no longer viable for a Government department to operate in the shadows or delay its online presence under the pretext of audit formalities. Timeliness and transparency are critical tenets of modern administration.
That said, the security of digital assets cannot be compromised. Chief Secretary’s emphasis on migrating departmental data centres to centralised, secure locations and his direction to avoid the use of private email IDs for official communication is commendable. Likewise, the implementation of endpoint detection and management solutions across thousands of devices shows a shift toward professional-grade cybersecurity practices. However, these measures must go hand in hand with the availability of services. Security and uptime are not mutually exclusive goals-they must be pursued in tandem.
One of the most pertinent steps forward would be to foster inter-departmental cooperation. Departments that have already met compliance standards must extend technical and procedural support to others. The culture of working in silos, which often plagues Government systems, needs to be replaced with collaborative, mission-driven task forces. The IT Department and NIC should not be left to bear the burden alone. Each department must take ownership of its digital presence, treat its website and data assets as frontline tools of service delivery, and ensure they meet and maintain the required standards. The issue also calls for institutionalising cybersecurity as a full-time professional mandate. Every department should have a dedicated ISO or CISO, not just on paper but with clearly defined roles and accountability. Furthermore, ongoing capacity building should be accelerated with formal training modules, certification programmes, and simulation drills. Cyber hygiene cannot be a seasonal concern-it must be part of the organisational DNA.
The shutdown of over a hundred Government websites for prolonged periods reflects a systemic failure in balancing security with service delivery. In today’s digital-first governance environment, this is neither acceptable nor sustainable. While the J&K Government has initiated meaningful steps toward fortifying its cyber infrastructure, a time-bound, mission-mode approach is the need of the hour.