Madhya Pradesh Agency for Promotion of Information Technology

(A CERT-In Empanelled organisation of Govt. M.P Under Dept. of Science & Technology)

- 5. CERT-In has published several Security Guidelines for safeguarding computer systems from hacking and these have been widely circulated. All Government Departments/ Ministries, their subordinate offices and public sector undertakings have been advised to implement these guidelines to secure their computer systems and information technology infrastructure.
- 6. Formulation of National Cyber Security Policy - the Government as formulated Crisis Management Plan for countering cyber-attacks and cyber terrorism for implementation by all Ministries/ Departments of Central Government, State Governments and their organizations and critical sectors.
- 7. CIIs Action Plan: An information security action plan for protection of critical information infrastructure is in place. The plan is aimed at enabling Government and the identified Critical sectors in improving the security of their CIIs & Information Technology systems and networks and it's verification through periodic risk assessments and annual audits by CERT-In & their empanelled auditing organizations.

## 5.MAP\_IT Cyber Security Audit & Testing- An Introduction

Madhya Pradesh is one of the first states in the country to set up its own State Data Center (SDC) for all govt. websites and data. As per IT Act 2008, it is mandatory to have security audit of all the application and web services to be eligible to be hosted in SDC. Since there are constant changes being done in the solution deployed at SDC it is recommended that post successful hosting a periodic security audit per the required frequency is executed for same. With, MAP\_IT(Madhya Pradesh Agency for Promotion of IT) becoming the first organization in MPtobeCERT-In empanelled, MPhastaken agiant step forward in comparison to other states in the direction of State wide CERT. The setting up of MP-CERT (Madhya Pradesh Computer Emergency Response Team) can now be realized. It is to be noted that not only first in MPrather MAP\_IT is the first state organization pan India to claim the coveted accolade. After achieving the momentous and herculean task of getting empaneled with CERT-IN, the first task cut out for the MP-CERT team is to ramp up the IT Infrastructure and ratify the policies which shall be adhered to by the MP-CERT team personnel tasked for the various objectives under the CERT-IN mandate.

### Objectives of MAP\_IT Cyber Security & Testing Team

The main objective of setting up the MPCyberSecurity Lab is to create a unit to mitigate the risk of cyber threats within the govt. of MPframework. The MP-CERT will have both anticipatory and reactive approach towards the cyber issues wherein it will not just monitor the threats but also ensure that timely audits are done to all the information systems categorized as Critical Infrastructure. The following are the main objectives of MP-CERT:

- • help identify CII and to set guidelines & procedures for CII to follow. • help identify CII and to set guidelines & procedures for CII to follow.
- • assist Government of Madhya Pradesh to prepare protocols to manage CII. • assist Government of Madhya Pradesh to prepare protocols to manage CII.
- • keep a watch on the security preparedness of Govt IT systems. • keep a watch on the security preparedness of Govt IT systems.
- • act as a nodal agency for security audit & cyber security related issues for Govt. of MP departments. • act as a nodal agency for security audit & cyber security related issues for Govt. of MP departments.
- • conduct security audit of IT systems and to establish and manage relationship with CERT-IN for co- • conduct security audit of IT systems and to establish and manage relationship with CERT-IN for co- ordination and response during cyber threats.
- • a govt. back body MP-CERT will act to mitigate the time lag on conducting the security audit of • a govt. back body MP-CERT will act to mitigate the time lag on conducting the security audit of systems of govt. of MP depts. And other organizations.
- • will issue guidelines, advisories, vulnerability notes and whitepapers relating to information • will issue guidelines, advisories, vulnerability notes and whitepapers relating to information security practices, procedures, prevention, response and reporting of cyber incidents.
- • is very important to note here that this setup shall not go into cyber crimes investigations and its • is very important to note here that this setup shall not go into cyber crimes investigations and its management.

State IT Center, 47-A, Arera Hills, Bhopal -462011, Tel: +91-755-2518702

Website: www.mapit.gov.in|| Email: info@mapit.gov.in