This plan describes how the website of the Office of the Controller General of Patents, Designs and Trade Marks (CGPDTM), Department for Promotion of Industry and Internal Trade, Ministry of Commerce and Industry, Government of India is kept available, and how it is restored if it is defaced, compromised or unavailable.

Defacement or compromise

  • The website is monitored for defacement and for unauthorised changes. If a defacement is detected, the website is immediately taken off line and replaced with a notice page.
  • The incident is reported to the Web Information Manager and to CERT-In. The hosting team isolates the affected systems and preserves logs for investigation.
  • The website is restored from the last known good backup after the vulnerability has been identified and fixed, and is security tested before it is brought back on line.

Data corruption or loss

  • The database and uploaded documents are backed up daily and the application code is kept under version control. Backups are stored at a separate location and are tested periodically.
  • In case of corruption or loss, the website is restored from the latest backup; the recovery point is at most one day.

Hardware, software or network failure

  • The hosting arrangement provides redundant hardware and network connectivity, and a documented procedure for bringing the website up on alternative infrastructure.
  • The target time to restore the website after a failure is four hours during office hours and twelve hours otherwise.

Responsibilities

The Web Information Manager coordinates the response, keeps the Controller General informed and approves the restoration. Contact details of the hosting team, the development agency and CERT-In are kept with the Web Information Manager and are reviewed every six months along with this plan.