Indian Council of Historical Research (ICHR)
Project Overview
ICHR engaged NetCreativeMind Solutions Pvt. Ltd. to renew the Security Audit Certificate for its official website, as the earlier certification had expired on 26.04.2019.
The work included performing a complete security audit, identifying vulnerabilities, supporting the resolution of issues, and issuing an updated certificate in accordance with Government of India cybersecurity requirements.
The approval was granted by the Competent Authority for the audit renewal at the approved cost, and the work was to be executed on priority to ensure continuous compliance.
Key Features
Security Audit Renewal
- Renewal of the official Security Audit Certificate for the ICHR website
- Execution of detailed vulnerability assessment and penetration testing (VAPT).
- Validation of compliance as required by Government cybersecurity norms
Technical Assessment
- Analysis of application-level, server-level, and network-level vulnerabilities
- Ensuring removal or mitigation of all identified risks before certification.
- Review of configurations, data handling, and access control mechanisms.
Certification & Documentation
- Issuance of the renewed Security Audit Certificate after successful testing
- Submission of complete audit reports and documentation for record and verification
- Coordination with ICHR’s IT Nodal Officer for approvals, clarifications, and final submission.
Technologies and Tools
Security Testing
Vulnerability Assessment & Penetration Testing Tools
Compliance
CERT-In, NIC & MeitY Cybersecurity Guidelines
Platform Evaluated
ICHR Website
Improve Efficiency
Real-time governance and data driven decision making.
Citizen-Centric
Enhanced transparency and accountability.
Performance Tracking
Custom KPIs and departmental monitoring.
Certified Solution
CERT-IN compliant and safe-to-host certified.
The renewed security audit ensured the ICHR website remained secure, compliant, and safe for public access. The engagement resulted in:
- Updated and compliant security status
- Mitigation of identified vulnerabilities
- Strengthened cybersecurity posture for the organization
- Smooth continuity of website operations without interruption
- Adherence to mandatory government cybersecurity protocols
