Website Security Policy
the Office of the Controller General of Patents, Designs and Trade Marks (CGPDTM), Department for Promotion of Industry and Internal Trade, Ministry of Commerce and Industry, Government of India is committed to protecting this website and the information it holds. The following measures apply.
- Security audit – the website application is audited by a CERT-In empanelled security auditor before it is hosted and after every major change, and an audit clearance certificate is obtained.
- Hosting – the website is hosted in a secured environment with firewalls, intrusion detection, regular patching and restricted administrative access.
- Encryption – all pages are served over HTTPS with current TLS versions only. Passwords are never stored in a readable form and are encrypted in the browser before they are sent.
- Access control – content is managed through a role-based CMS with named user accounts, strong passwords, session time-outs, lock-out after repeated failed sign-in attempts and a log of every administrative action.
- Content integrity – content is published only after review and approval (see the Content Contribution, Moderation and Approval Policy); changes are recorded with revisions.
- Backups – the website code, database and documents are backed up regularly and backups are tested (see the Contingency Management Plan).
- Incident response – security incidents are reported to the Web Information Manager and to CERT-In in accordance with CERT-In directions.
Visitors who notice a security problem with this website are requested to report it through the Feedback form.