सुरक्षा नीति
- MP-eServices https://services.mp.gov.in/ has been placed in protected zones with implementation of firewalls and IDS (Intrusion Detection System) and high availability solutions.
-
Before launch of the MP-eServices https://services.mp.gov.in/ Portal simulated penetration tests were conducted.
Penetration testing has also been conducted
after the launch of the MP-eServices https://services.mp.gov.in/ - MPSEDC has been audited for known application level vulnerabilities before the launch and all the known vulnerabilities have been addressed. Hardening of servers has been done as per the guidelines of Cyber Security division before the launch of the MP-eServices.
- Access to web servers hosting the MP-eServices. is restricted both physically and through the network as far as possible.
- Logs at different locations are maintained for authorized physical access of Madhya Pradesh State Electronics Development Corporation ltd servers.
- Web-servers hosting the MP-eServices are configured behind IDS, IPS (Intrusion Prevention System) and with system firewalls on them.
- All the development work is done on a separate development environment and is well tested on the staging server before updating it on the production server. After testing properly on the staging server the applications are uploaded to the production server using SSH and VPN through a single point.
- The content contributed by/from remote locations is duly authenticated & is not published on the production server directly. Any content contributed has to go through the moderation process before final publishing to the production server.
- All contents of the web pages are checked for intentional or unintentional malicious content before final upload to web server pages.
- Audit and Log of all activities involving the operating system, access to the system, and access to applications are maintained and archived. All rejected accesses and services are logged and listed in exception reports for further scrutiny.
Use of Cookies:
We are using following types of cookies in our site-:
- Analytics cookies for anonymously remembering your computer or mobile device when you visit our website to keep track of browsing patterns.
- Service cookies for helping us to make our website work efficiently, remembering your registration and login details, settings preferences, and keeping track of the pages you view.
Non-persistent cookies a.k.a per-session cookies. Per-session cookies serve technical purposes, like providing seamless navigation through this website. These cookies do not collect personal information on users and they are deleted as soon as you leave our website. The cookies do not permanently record data and they are not stored on your computer’s hard drive. The cookies are stored in memory and are only available during an active browser session. Again, once you close your browser, the cookie disappears. where you are prompted to log in, or which are customizable, you may be required to accept cookies. If you choose to have your browser refuse cookies, it is possible that some sections of our web site may not function proper