Indian rules on cyber security and personal data now reach even small businesses. Much of what they ask for is done on your servers. That part we can do for you.
We are server engineers, not lawyers. This page is general information and is not legal advice. Ask your lawyer or adviser what applies to your business.
Directions issued by India's Computer Emergency Response Team under the Information Technology Act. In plain words, they ask organisations that run IT systems to:
India's law on personal data. In plain words, an organisation that handles personal data is expected to:
Rules change and have details and exceptions. Always read the current text or ask an adviser.
We configure log rotation and off-server copies so your system, web server and login logs are kept for the period you need.
We set up and check NTP on your servers.
Scheduled off-server backups with restore tests, so you can show your backups work.
Security updates applied on an agreed timetable, with a record of what was done and when.
Named server accounts, SSH keys, no shared passwords, and removal of access when people leave.
Firewall rules, secure defaults and round-the-clock monitoring, so problems are noticed early.
If something goes wrong we investigate, contain it, clean up and give you a written report you can use when you report the incident.
These are things we set up and look after for you. Tell us what you need and we will say plainly which plan covers it and what is extra.
Take the free ten-question check to see where you stand, then talk to us about the server gaps.