Page 7 - GiGW3

1. Introduction
I gathered by the STQC Directorate auditors and
Introduction
I n recent years, digital technologies have
increasingly contributed to economic
growth and citizen empowerment.
These technologies have become
ubiquitous in everyday life and enable
people to access various services from the
comfort of their homes. Government has
established web presence through multiple
websites, web portals, web applications and
mobile apps that o er information and services
to the public. However, inconsistency in
conventions, layout standards, navigation
strategies and technologies adopted can
reduce the e ectiveness of websites/apps.
In this context, the National Informatics Centre
7
1.0
(NIC) formulated the Guidelines for Indian
Government Websites (GIGW) in the year 2009.
GIGW aims to ensure quality and accessibility of
government guidelines, by o ering guidance
on desirable practices covering the entire
lifecycle of websites, web portals and web
applications, right from conceptualisation and
design to their development, maintenance and
management. The Department
Administrative Reforms and Public Grievances
made the same a part of the Central Secretariat
Manual of O ce Procedure.
The second version of GIGW (GIGW 2.0) was
developed in 2019, taking into account
feedback from and consultations with industry,
society and government organisations. GIGW
2.0 took note of the standards evolved by
international bodies like the world-wide web
consortium (W3C) and advancements in
technology. It also included guidance on mobile
apps.
This version is the third version of GIGW (GIGW
3.0). While the earlier versions were formulated
in-house with external inputs, GIGW 3.0 has
been formulated jointly with Standardisation
Testing and Quality Certi cation (STQC)
Directorate of the Ministry of Electronics and
Information Technology and Indian Computer
Emergency Response Team (CERT-In), so that
the experience of conformity with GIGW
the cybersecurity experience and knowledge of
CERT-In also inform the GIGW. As in earlier
versions, GIGW 3.0 too has also been formulated
in association with industry and experts.
The key thrust of GIGW 3.0 is on o ering speci c
to improve the user interface and user
guidance to government organisations on how
experience (UI and UX), by incorporating
features such as intuitive page loading (using AI
and analytics) based on user journey and user
pro le, using state-of-the-art content
management system (CMS), user-centric
information architecture (IA), centralised
monitoring dashboard to identify and provide
of
alerts on non-conformity and technical
enablement of all content creators and
publishers.
GIGW 3.0 also signi cantly enhances the
guidance on the accessibility and usability of
mobile apps, especially by o ering speci c
guidance to government organisations on how same. Such guidance and advisories issued by all government organisations and their
to leverage public digital infrastructure devised CERT-In from time to time should be treated as implementation and evaluation partners.
for whole-of-government delivery of services, updates to the guidance contained in the Government organisations are expected to
bene ts and information. These cover aspects chapter on cybersecurity and any assessments carefully assess their existing websites, web
such as API level integration for use of or audit carried out with reference to GIGW 3.0 portals, web applications and mobile apps
integration with social media, India Portal, should also be cognizant of the same. Further, against GIGW 3.0, identify areas requiring
DigiLocker, Aadhaar-based identity, single while government organisations may continue improvement, draw up time bound
sign-on, data sharing in open formats on the to establish conformity with GIGW 3.0 by implementation plans to achieve conformity
government’s data platform, government’s obtaining Certi ed Quality Website (CQW) with GIGW 3.0 and obtain CQW certi cation
scheme discovery platform, government’s certi cation from the STQC Directorate, the from the STQC Directorate. Similarly, websites,
citizen engagement platform MyGov, AI-based certi cation of cybersecurity aspects by STQC web portals, web applications and mobile apps
Indian language translation tools, seamless may be done on the basis of the “safe to host” that are at the design or implementation stage
content/data access across web-based certi cate issued by the cybersecurity auditors may also be reviewed to ensure that their
solutions of government organisations. GIGW empanelled by CERT-In/STQC or the auditors of design, architecture, development and scope of
of websites and apps, with a view to make To make the guidelines more readily usable, approvals, resources etc. are tied up to ensure
audit conform to GIGW 3.0 and requisite
STQC or NIC.
3.0 o ers upgraded guidelines on accessibility
access to cyberspace more inclusive. In view of
which entity/person has a role in implementing
this.
incorporation of comprehensive guidance in a particular guideline has been identi ed in While GIGW embodies general guidance for
every guideline. Thus, each guideline speci es
government websites, web portals, web
this version on apps as well (in addition to
applications and mobile apps, particular
whether the same is to be acted upon by the
websites), this version is titled “Guidelines for
Indian Government Websites and Apps”. government organisation concerned or the website/app use cases may require adoption of
currency, the acronym has been retained, with The e ectiveness of GIGW 3.0 in enhancing ease Government organisations may keep this in
However, since the acronym GIGW gained wide
higher norms and speci c technologies.
developer or the evaluators.
their
while
formulating
mind
of living through various web-based initiatives
the letter “W” being signifying “Websites and
design,
Apps”. of the government would depend on their architecture and scope and may consult NIC in
e ective implementation in letter and spirit by
A chapter on cybersecurity, formulated by
case they desire technical advice in the matter.
CERT-In, has also been incorporated so that
GIGW can serve as a single point of reference on
all the relevant aspects — quality, accessibility
and security — relating to websites, web
portals, web applications and mobile apps.
Since cybersecurity requirements undergo
continuous evolution in light of emerging
threat scenarios, threat vectors and
technologies, CERT-In continuously issues
updated guidance and advisories to address the