JaKeGA conducts training on security audit of departmental websites

Officers being trained on security audit of departmental websites by JaKeGA officials in Jammu on Friday.
Officers being trained on security audit of departmental websites by JaKeGA officials in Jammu on Friday.

Excelsior Correspondent

JAMMU, Mar 1: The Jammu and Kashmir e-Governance Agency (JaKeGA) organized a comprehensive two-day training-cum-handholding session on security audit of departmental websites.
Held from February 29 to March 1, 2024, the session aimed at equipping nodal officers from various Government departments with the necessary skills and knowledge to ensure the security compliance of their applications and websites.
Attended by 43 officers and officials representing 36 departments, the session was conducted under the direct supervision of Anuradha Gupta, Chief Executive Officer of JaKeGA. Leading the training were Saima Mir, Project Manager, and Arun Panotra, Analyst IT, from JaKeGA.
Highlighting the importance of security audits as mandated by the Information Technology Act, the session emphasized the necessity of getting audits done for all web applications and services.
This measure is crucial for eligibility to host in the Data Centre and aims at reducing vulnerabilities and minimizing damage from cyber incidents, particularly in safeguarding government data hosted in the SDC.
Experts from JaKeGA guided departmental nodal officers through the security audit process for unaudited websites, clarifying technical queries and explaining the GEM procurement process.
Stressing on the need for audits to be conducted by CERT-IN empanelled agencies, officers were informed that clearance from security audits is imperative for website hosting on J&K Data Centre servers.
Additionally, officers were briefed on the importance of regular updates, including security certificates, and monitoring of websites and applications on a daily basis to prevent security compromises.
Any changes in the source code necessitate immediate security audit to maintain compliance and ensure robust cyber-security measures, the officers were told.