J&K Administration Orders Deactivation of Official Websites on Private Domains Amid Cybersecurity Concerns
Srinagar 21 May 2025: In a decisive move to strengthen cybersecurity and protect sensitive government data, the Jammu and Kashmir administration has issued a directive requiring all government departments to deactivate official websites hosted on private domains. This decision follows a series of cyberattacks launched by foreign hackers during the recent conflict between India and Pakistan, raising concerns about data breaches, phishing attacks, and unauthorized access.
The directive, issued by the General Administration Department (GAD) Secretary, M Raju, aims to standardize digital security protocols and ensure compliance with government IT policies. The administration has also mandated the exclusive use of NIC-provided government email IDs for all official communication, prohibiting the use of private email services such as Gmail, Yahoo, and Rediffmail.
Why the Move? Understanding the Cybersecurity Threats
Cybersecurity threats have been escalating globally, with government websites often being prime targets for hackers. The recent cyberattacks on J&K government websites exposed vulnerabilities in private domain hosting, prompting urgent action.
Key Cybersecurity Risks Identified
- Unauthorized Digital Platforms – Many departments were operating official websites on private domains such as
.com,.org, and.net, which are not aligned with government cybersecurity protocols. - Outdated Hardware & Software – The use of obsolete IT infrastructure increased the risk of data breaches.
- Phishing & Data Compromise – Hackers exploited weak security measures, leading to unauthorized access to sensitive government data.
- Lack of Standardization – The absence of uniform IT policies resulted in inconsistent security practices across departments.
Key Directives Issued by the J&K Administration
To mitigate cybersecurity risks, the administration has enforced strict IT governance measures, including:
1. Immediate Deactivation of Private Domain Websites
- All government departments must shut down websites hosted on private domains.
- The National Informatics Centre (NIC) in J&K will assist in migrating websites to secure government domains such as
.gov.inor.jk.gov.in.
2. Mandatory Use of Government Email IDs
- Officials must use NIC-provided email IDs for all official communication.
- Emails sent from private domains (Gmail, Yahoo, Rediffmail, etc.) will be treated as unofficial and may not be acted upon.
3. IT Compliance & Cybersecurity Training
- Departments must nominate officers for cybersecurity training.
- Strict adherence to national cybersecurity protocols is required.
4. Standardization of IT Hardware & Software
- Government offices must procure IT equipment that meets approved specifications.
- The use of pirated or obsolete software is strictly prohibited.
- Departments must plan updates and upgrades for all software nearing end-of-support.
5. Mandatory Reporting & Monitoring
- Departments must submit detailed compliance reports within 15 days.
- Reports must include:
- Website domain status
- Email compliance
- IT audit results
- Plans for rectifying outdated or pirated software
6. Disciplinary Action for Non-Compliance
- Failure to implement these directives will result in strict disciplinary action under official conduct and IT governance rules.
Impact on Digital Governance in J&K
The implementation of these cybersecurity measures is expected to enhance digital security, ensuring accountability and modern governance across the Union Territory.
Expected Benefits
✔ Improved Data Security – Reduced risk of hacking and unauthorized access. ✔ Standardized IT Practices – Uniform cybersecurity protocols across departments. ✔ Enhanced Public Trust – Citizens can rely on secure government platforms. ✔ Efficient Digital Communication – Streamlined official correspondence using government email IDs.
Challenges & Concerns
While the move is necessary for cybersecurity, it also presents challenges:
- Migration Complexity – Transitioning websites to government domains may require technical expertise.
- Training Requirements – Officials must adapt to new cybersecurity protocols.
- Operational Adjustments – Departments must revise IT procurement strategies to comply with new regulations.
Bottom-Line
The Jammu and Kashmir administration’s directive to deactivate official websites on private domains marks a significant step toward strengthening cybersecurity. By enforcing standardized IT policies, the government aims to protect sensitive data, prevent cyber threats, and ensure secure digital governance.
As cybersecurity threats continue to evolve, proactive measures like these will be crucial in safeguarding government infrastructure. The success of this initiative will depend on effective implementation, compliance, and continuous monitoring.
