AP working on e-security policy

In what could be a first for any state government, the Andhra Pradesh government is working to evolve a common e-security policy. The e-security policy will comprehensively look at ensuring the IT infrastructure that the government has put in place against security breaches.

P Raghuveer, additional secretary, IT & Communications Department, Government of Andhra Pradesh, told Business Standard that the department was working towards ensuring that a behavioural change took place and users in the government became professional users.

"Two years ago, we conducted a security audit utilising the services of the HCL Comnet. The security policy that is being worked upon now is a reflection of the gaps that we found during the audit," he said.

"There are certain amendments that are needed in the conduct rules to enforce the policy. We are trying to ensure that the policy positively impacts aspects of system usage, internet usage, data security, passwords, and also management of IT assets," Raghuveer said.

A PWC-CII survey in 2002-03 showcased the lack of a comprehensive security policy across Indian companies and the non existence of any security implementation.

The report found out that while a large number of respondents had accorded a high priority to security, only 41 per cent had a comprehensive security policy in place.

Raghuveer, pointed out that to ensure that the policy was understood, was effective and easily implementable, the IT department was working to contain the policy in three to four pages.

"We have drawn out a policy matrix and are trying to ensure that the policy that we are drafting is understood by all. We are at the end striving for effecting a behavioural change in the users and educating them about the potential pitfalls of certain actions,"Raghuveer said.

The enforcement of the policy, when it happens, is expected to increase the productivity levels of the users in the government and also enhance the user satisfaction levels, according to Raghuveer.

The Andhra Pradesh government may end up investing close to Rs 1 crore on intrusion detection devices and firewalls once the policy is finalised and adopted for usage.