Several official websites of departments under the Government of the Union Territory of Jammu and Kashmir have gone offline after failing to comply with mandatory cybersecurity protocols requirements. These audits, mandated by the Ministry of Electronics and Information Technology (MeitY), are essential to identify and mitigate vulnerabilities in digital infrastructure.
Failure to Produce CERT-In Security Audit Certificates
Over the past few days, a significant number of websites belonging to various government departments and Public Sector Undertakings (PSUs) were disabled. The reason? Their inability to furnish valid security audit certificates from CERT-In (Computer Emergency Response Team-India). This certification is a crucial step in validating a website’s protection against growing cyber threats.
Impact on Public Services and Online Portals
The failure to comply with these cybersecurity norms has disrupted public services. Citizens are currently unable to access a wide range of government e-services, resulting in delays, confusion, and inconvenience. Despite repeated directives by the UT Government emphasizing regular audits, many departments ignored the compliance deadlines.
Sources revealed that even critical institutions like the Information Technology Department and the Jammu and Kashmir e-Governance Agency (JAKEGA), which are responsible for guiding other departments in digital transformation and cybersecurity, have seen their own portals go offline due to the same lapse.
Importance of Security Audits for Government Websites
The Ministry of Electronics and IT mandates annual security audits and vulnerability assessments for all government websites and applications. These audits aim to identify potential flaws through penetration testing and vulnerability scanning—crucial techniques for preventing data breaches and protecting sensitive information.
Security audits are not just a compliance formality; they are essential to:
- Protect the confidentiality and integrity of public data.
- Ensure availability of critical government services.
- Build and maintain public trust in digital governance.
The Domino Effect: Risk to Citizen-Centric Applications
The impact of non-compliance may go beyond just websites. Several citizen service applications integrated with these portals are likely affected. This has disrupted key services like digital certificates, online registrations, grievance redressal systems, and payment gateways.
According to officials, these disruptions could have been avoided if departments had proactively conducted security audits via CERT-In empanelled agencies.
Repeated Warnings Ignored: Circular No.08 Highlights Lapses
The General Administration Department (GAD) had earlier issued Circular No.08 on March 27, 2024, highlighting the urgent need for all departments, PSUs, and other government bodies to complete their security audits. It explicitly directed:
- Heads of Departments, Managing Directors, and Deputy Commissioners to conduct audits at least once a year.
- Strict adherence to cybersecurity policies and guidelines outlined by CERT-In and MeitY.
Despite these clear instructions, a large number of websites hosted on the State Data Centre remained unaudited, significantly increasing the risk of cyberattacks. CERT-In had already flagged several of these vulnerabilities in its recent reports.
Official Warning: Websites to Be Shut Down for Non-Compliance
The circular also warned that failure to comply with the audit guidelines would lead to the immediate shutdown of the non-audited websites and applications. The latest wave of website outages is a direct consequence of ignoring these instructions.
This incident has served as a wake-up call for the departments that dismissed the importance of cybersecurity. It also highlights the urgent need to prioritize digital hygiene in the face of growing online threats.
Government Response: Recovery in Progress
An official from JAKEGA confirmed that websites of several departments are currently down due to non-compliance with mandatory audit certifications. He assured that the agency is in constant touch with these departments and that most websites will be back online within a few days after the audits are completed and certifications are acquired.
The recent website outages in Jammu and Kashmir serve as a crucial reminder of the importance of adhering to cybersecurity policies. As the government pushes for more digital services and e-governance initiatives, securing these platforms must become a top priority. Regular vulnerability assessments, timely audits, and proactive cybersecurity planning are non-negotiable for a resilient digital future.
The departments affected by this incident now have an opportunity to course-correct, improve internal processes, and build robust cyber-safe platforms for the benefit of all citizens.
