Security Policy
Last updated: December 20th, 2025
Forest Survey of India, places the highest priority on ensuring the security, integrity, and availability of its website https://fsi.nic.in and associated IT infrastructure. This Website Security Policy outlines the measures adopted by FSI to safeguard its systems, applications, and data against unauthorized access, misuse, and cyber threats.
All computer systems, servers, and network components of FSI are placed in secure zones protected through the implementation of firewalls and high-availability solutions. Before the launch of the website, simulated penetration tests were conducted, and the site was re-tested after launch to identify and address potential vulnerabilities. The website has been thoroughly audited for known application-level vulnerabilities and all identified issues were resolved prior to its launch. Server hardening was completed as per the guidelines issued by the Cyber Security Division.
Access to the web servers hosting the FSI website is strictly controlled both physically and through network restrictions. The servers are configured behind Intrusion Prevention Systems (IPS) and secured with system firewalls. All development activities are carried out in a separate environment and thoroughly tested on a staging server before being deployed to the production environment. Applications are uploaded to the production server only after testing, using secure channels such as SSH and VPN through a single access point.
Content contributed remotely is properly authenticated and subjected to moderation before final publishing on the production server. All web content is scanned for malicious code or vulnerabilities before being uploaded. Comprehensive audit logs of all system and application activities are maintained and archived. Any unauthorized or rejected access attempts are recorded and reviewed in exception reports for further analysis.
IT section of FSI monitors the website daily to ensure that all web pages are functional, secure, and free from unauthorized modifications or links. All newly released system patches, bug fixes, and software upgrades are reviewed and promptly installed on production servers. Internet browsing, email access, and other non-administrative applications are disabled on production servers to maintain system integrity.
Server passwords are changed at regular intervals of three months and shared with System Manager and IT Section. System Manger, Deputy Director has been designated as the Administrator and Sh. Prakash Lakhchaura, Deputy Director General has been designated as the Web Information Manager for FSI Website-https://fsi.nic.in and is responsible for implementing this policy and coordinating with the audit team for necessary server audits.
The website has been re-audited for application-level vulnerabilities following major modifications in application development. It has been reviewed in accordance with the Cyber Security Group?s policy guidelines and has complied with all required security standards. Automated risk assessments have been performed both before and after launch using vulnerability identification tools, and all known risks have been effectively addressed.
Through these comprehensive measures, the Forest Survey of India ensures continuous protection, monitoring, and resilience of its website infrastructure in alignment with Government of India cyber security best practices.