Page 98 - GIGW2

CH 08 Website Hosting

c. The Web Hosting Service Provider MUST have a redundant server
infrastructure to ensure fastest restoration of the website in the event of any
unforeseen hardware/software failure.
d. The HSP MUST have a Disaster Recovery (DR) Centre in a geographically
distant location and a well drafted DR plan for fast restoration of the services
during any disaster.
e. Provision should be given to the concerned Department to remotely update
their website in a secured manner.

f. The HSP should also provide the facility of staging infrastructure in order to
facilitate the testing of the new websites as well as their enhanced or revised
versions’ content prior to publishing on the internet.

g. HSP should provide web server statistics required for performance evaluation
on a regular basis. If possible, online access to the traffic analysis should be
provided so that the Department can access the traffic analysis at any point
of time for the purpose of evaluation.

h. Web Hosting Service Provider MUST provide helpdesk and technical
support to the department on 24 x 7 x 365 basis.

8.3

Contingency Management

The website of a Government Department is its presence on the Internet and it is very
important that the site is fully functional at all times. It is expected of the Government
websites to deliver information and services on a 24x7 basis. Hence, all efforts should be
made to minimise the downtime of the website as far as possible.
It is therefore necessary that a proper Contingency Plan MUST be prepared in advance
to handle any eventualities and restore the site in the shortest possible time. The possible
contingencies include:

8.3.1 Defacement of the website: All possible security measures must be taken
for a Government website to prevent any possible defacement/hacking by
unscrupulous elements (Ref. 7.7.1). However, if despite the security measures in
place, such an eventuality occurs, there must be a proper contingency plan, which
should immediately be executed. If it has been established beyond doubt that the
website has been defaced, the site must be immediately blocked. The contingency
plan must clearly indicate as to who is the person authorised to decide on the
further course of action in such eventualities. The complete contact details of this
authorised person must be available at all times with the web management team.

84