Question : SECURITY OF RAILWAY WEBSITES

(a) whether the websites of Railway zones and railway departments have been controlled by independent web domains which have low security cover compared to most other Government websites which run on a common platform managed by the National Informatics Centre (NIC) and controlled by respective organizations and the State Government;

(b) if so, the details thereof;

(c) whether the Railways have taken any measures for strict safety protocols and multiple layers of security to prevent mimicking of the website;

(d) if so, the details thereof, if not, the reasons therefor; and

(e) the steps taken by the Railways in this regard?

MINISTER OF STATE IN THE MINISTRY OF RAILWAYS (SHRI MANOJ SINHA)

(a): No, Madam.

(b): Does not arise.

(c): Yes, Madam.

(d): Details of security measures: Access control lists, Signature based network intrusion prevention, Secure access control servers for credential verification, Separate fire-walled network zones, Application delivery controllers. Periodic health checks and vulnerability assessments are conducted to ensure operational readiness. Systems are proactively monitored 24x7.

(e): Does not arise.