Website Policies

Objectives

The purpose of these website policies is to clearly explain how this website operates, what website's visitors can expect, and what is expected from website's visitors. It ensures protecting both the website owner and the website's visitors, while also ensuring legal and ethical compliance.

Some of the main objectives of these website policies are: Legal Protection, Transparency, User Rights & Responsibilities, Data Privacy & Security, Compliance with Laws, etc.

The website of Green Credit Programme (GCP) is governed by the various policies mentioned below:

(a) Contingency Management Plan

Preventive Measures

• Content of the website is stored in backups on a daily basis.
• Content of the database is stored in backups on a daily basis.
• Content of the website is updated using IP-based access on the Local Area Network only.

Contingency Plan

Detection

• Any disruption or vulnerability in the availability of the website's service must be reported immediately to the Web Information Manager.
• The IT Team of GCP must assess the cause and impact of the issue.

Communication

• Immediate detailed information about the incident must be shared with the Web Information Manager.
• Notification must be shared with the staff of GCP and other stakeholders.
• Regular updates must be shared with the staff of GCP and other stakeholders through email, the website and other communication modes.

Website Restoration

• The content of the website must be restored from the latest backups, ensuring the last updated data is in place.
• The IT Team must ensure the correctness and synchronicity of the data published on the website during restoration.

Post-Incident Measures

• The findings and cause must be well documented with reference points.
• Steps taken and challenges encountered while recovering from the incident must be well documented.

Awareness and Measures

• The staff must be made aware of changing passwords at regular intervals and using strong passwords.

(b) Website Monitoring Plan

Purpose

Green Credit Programme (GCP) provides this website and the information it contains as a service to the public. This system is monitored to make sure it is operating correctly, to confirm that the relevant security elements are working, and for similar reasons. Every user of this system gives their express agreement to be monitored.

Content of the website is regularly monitored for the purposes mentioned below:

• Ease of use and accessibility.
• To maintain the 24/7 accessibility of the GCP website.
• To maintain the efficiency and performance of the GCP website.

Mechanism

• Login records are monitored regularly to keep track of any suspicious login attempts.
• The feedback system allows visitors to provide feedback through a feedback form. Additionally, it provides a tool for analyzing user comments, which will aid in improving the website based on suggestions from users.

(c) Security Policy

Purpose

The purpose of the security policy is to ensure protection of its data, information, systems, and assets from threats and misuse.

To achieve the purpose of the security policy, some of the best practices followed by GCP are:

• Use of long, randomly generated, hard-to-guess passwords for accessing admin panels, servers, information systems, etc.
• Changing passwords at predefined regular intervals.
• Allowing only IP-based local area network access to admin panels, servers, information systems, etc.
• Storing passwords and other sensitive information in the database in encrypted form.
• Conducting regular security audits of the web portals by CERT-In empanelled vendors.
• Performing penetration checks regularly on the login systems of admin panels.
• Use of verified and trusted SSL certificates for the websites.

Thank you for visiting the official website of the Green Credit Programme.