Website Policies

• At many places on this official website of ICMR-NIRT, you may find links to other websites or portals. These links are provided for the convenience of users.
• ICMR-NIRT is not responsible for the contents or reliability of the linked websites and does not necessarily endorse the views expressed within them. The presence of such links should not be interpreted as endorsement of any kind.
• ICMR-NIRT cannot guarantee that these links will work at all times and has no control over the availability of linked pages.

• We do not object to other websites linking directly to information hosted on the ICMR-NIRT website, and no prior permission is required for linking to this site.
• However, we request that you inform us about any such links so that we may notify you of any changes or updates to the website.
• Please note that:
  • Our web pages must not be loaded within frames on other websites.
  • The pages belonging to the ICMR-NIRT website must open in a new browser window or tab.

Since the website represents the public interface of ICMR-NIRT, it is essential that the content remains current and accurate.

• Website content is reviewed at least once every quarter by the concerned departments in coordination with the Communication Committee.
• Content is updated immediately whenever changes occur, such as new announcements, recruitment notices, policy updates, or administrative changes.
• Outdated or irrelevant content is either updated, archived, or removed in accordance with the Content Archival Policy.

• The website is periodically monitored by the Website Team, Electronic Data Processing (EDP) Department, ICMR-NIRT to ensure proper functioning, accessibility of content, and overall technical performance.

• Each content component that is valid for a specific period is accompanied by a validity date. For certain content elements where the validity period is not predefined, the content may be considered perpetual.
• Under no circumstances will content be displayed on the website beyond its validity date. Once the validity period expires, the content will be reviewed and either archived, updated, or removed, as appropriate.

• Content that has crossed its validity period but may still be required for reference purposes will be moved to the Archive section of the website.
• Archived content will remain accessible to users for informational purposes but will be clearly identified as archived material.

• The content published on the website is reviewed periodically by the concerned department in coordination with the Communication Committee to ensure that outdated or irrelevant information is removed or archived in a timely manner.

• The responsibility for identifying content for archival lies with the concerned department contributing the content, while the Website Team, EDP Department, ICMR-NIRT carries out the technical archival process on the website after necessary approval.

• Checking website performance and accessibility
• Verifying functionality of webpages and application features
• Identifying and correcting broken links or missing pages
• Reviewing website traffic and usage statistics
• Monitoring user feedback received through the website
• Ensuring that published content is displayed correctly across different browsers and devices

The following preventive measures are implemented to protect the website from unauthorized modification or defacement:

• The website application undergoes periodic security reviews and vulnerability assessments.
• Any application-level modification or upgrade is tested and validated before deployment in the production environment.
• Access to the hosting server is restricted to authorized system administrators using secure authentication mechanisms.
• Backend servers are protected through firewalls, secure SSH access, and restricted administrative privileges.
• All content updates are performed by authorized personnel through secure administrative access and authenticated channels.
• Security patches and updates for the web application and server environment are applied periodically.

Continuous monitoring mechanisms are implemented to ensure the availability and security of the website.

• The hosting provider monitors server infrastructure, uptime status, and system health.
• Website accessibility and functionality are periodically verified by the Website Team, EDP Department, ICMR-NIRT.
• Server and application logs are reviewed periodically to detect abnormal activity or potential security incidents.

In the event of website defacement or suspected compromise, the following procedure will be followed.

• Step 1: Incident Reporting
  Any person identifying the issue shall immediately inform the Incident Response Team through telephone and official email.
• Step 2: Immediate Containment
  • Access to the affected services may be temporarily restricted or suspended.
  • The hosting provider will be informed immediately to initiate investigation and infrastructure-level checks.
• Step 3: Investigation
  • Server logs and system records will be analyzed to identify the source and nature of the attack.
  • Vulnerabilities exploited during the incident will be identified.
• Step 4: Remediation
  • Identified vulnerabilities will be patched immediately.
  • Security configurations will be strengthened to prevent recurrence.
• Step 5: Restoration
  • Website content and services will be restored from the latest available backup.
  • The application will undergo validation and security checks before being made fully operational.

These officers serve as incident response coordinators and will initiate appropriate actions in coordination with the Website Team, EDP Department, ICMR-NIRT.

To ensure continuity of service, regular backups of the website are maintained.

• Periodic backups of website files and databases are taken and stored securely.
• Backups may be maintained through the hosting provider or institutional backup mechanisms.
• Backup copies enable restoration of the website in case of data loss, corruption, or system failure.

To ensure timely restoration of services:

• Recovery Time Objective (RTO): The website will be restored within a reasonable timeframe depending on the severity of the incident.
• Recovery Point Objective (RPO): Data restoration will be performed using the latest available backup.

• The hosting provider will initiate server recovery procedures.
• The website will be restored using available backups.
• System integrity and security will be verified before restoring full website services.

• This contingency management plan will be reviewed periodically by the Website Team, EDP Department, ICMR-NIRT to ensure its effectiveness and alignment with current security and operational requirements.

• Periodic security reviews and vulnerability assessments are conducted.
• Any major application-level modification is tested before deployment.
• Access to the server is restricted to authorized system administrators.
• Server infrastructure is protected through secure authentication and access control mechanisms.
• System logs are reviewed periodically to detect any suspicious activity.