Pushes for swift e-SAM rollout, web audits & cyber safety reinforcement
Chief Secretary, Atal Dulloo, today chaired a high-level meeting to review the progress made on the implementation of the Cyber Security Action Plan across J&K.
The meeting was attended by Administrative Secretaries of all departments; Inspector General, (Crime); Commissioner, Jammu/Srinagar Municipal Corporation; CEO, JaKeGA; SIO, NIC, and other concerned officers.
At the outset, the Chief Secretary took a comprehensive review of the initiatives undertaken to strengthen the cyber security framework of the UT.
He noted with satisfaction the progress made in the security audit of departmental websites, installation of Endpoint Detection and Response (EDR) and Unified Endpoint Management (UEM) solutions in the Civil Secretariat, and other measures designed to safeguard government systems from cyber threats.
He also reviewed steps being taken for the augmentation of State Data Centre (SDC), operationalization of a Mini Security Operations Centre (SOC), and capacity building of officers to promote cyber hygiene across departments.
Stressing on the importance of holistic protection of IT assets, the Chief Secretary directed for the early roll-out of the e-SAM portal in J&K. The system will ensure comprehensive inventorization of all IT assets and strengthen their security and monitoring.
During the meeting, Secretary, IT Department, Dr. Piyush Singla, briefed that out of 250 websites, security audit of 175 has been completed and are live, while the remaining 40 are under vulnerability testing. He added that 1–2 websites are being cleared daily and the entire process will be completed within the ensuing month.
It was also informed that of the 53 portals hosted by JaKeGA, 50 have already been secured and made live, with just 3 pending. Further, 19 redundant websites have been decommissioned after consultation with the concerned departments.
Dr.Singla apprised that EDR and UEM have been successfully deployed across the Civil Secretariat complexes in Jammu and Srinagar, covering around 5,100 devices. The process is now being extended to Head of Department (HoD) offices.
The meeting was further informed that the census of IT assets had been completed by 23 departments, and the J&K instance of the e-SAM portal is in the testing phase. Once operational, it will provide a unified, end-to-end inventory of IT assets to strengthen cyber resilience.
The Chief Secretary also reviewed the status of Cyber Crisis Management Plans (CCMPs) submitted by departments, the adoption of official government email IDs (which now stands at 1.61 lakh users), and the growing use of Gov Drive for secure storage. The meeting further discussed measures regarding whitelisting/disabling of USB/pen drive usage, which has largely been restricted with whitelisting allowed only in exceptional cases.
Other key discussions included the migration of certain applications to the national Meghraj cloud, amalgamation of SICOP and JPDCL data into the State Data Centre, and operationalization of the Single Window System, which is expected to go live by the end of this month. The augmentation of SDC, operationalization of Mini SOC at Jammu which eventually is going to be upgraded into a full-fledged SOC, and phased migration of websites from IPv4 to IPv6 by year-end were also deliberated upon.
The Chief Secretary emphasized the importance of a proactive approach to cyber security, underlining that robust digital safety measures are integral for ensuring efficiency and reliability in governance. He directed all departments to work in close coordination with the IT Department to plug gaps, adopt best practices, and complete all pending tasks within stipulated timelines.