1. LAND RECORDS INFORMATION SYSTEMS DIVISION
NIC HQRS, NEW DELHI

2. Security Solutions
Security is a balance between maintaining the ease of use of resources in your organization and controlling access to those resources.
Present Security Measures in CLR
People
Tehsildar/SRO-Administrator (Approver)
Patwari/Registry Clerk/Data Entry Operator
Process
Controlled Access to CLR /SRO Cell
Roles Delegated to authorized persons/parities
Technology
Bio Metrics
Password based login
Role/Menu based on access

3. Flexible authentication architecture supports multiple mechanisms for “proof of identity” on the network
Authenticate
Internet
Smart Card
X.509 / SSL
Password
Biometrics
Active
Directory
Windows 2008
Server
Applications
Computers
Devices
Files
People

4. SECURITY ASSURANCE

5. Digital Signature and NLRMP Framework
SRO
Cadastral Mapping

6. Security Frame-work for NLRMP
To develop a “Techno Legal” complying framework in which Land Records Tehsils/SRO should operate.
ISO and IT Act 2000 are reference for benchmarking.
Land Records Manuals /Registration Act
Guidelines by Departments issued and Practices adopted by the Revenue officials

7. What Is a “Security Policy”?
“A security policy is a formal statement of the rules by which people who are given access to an organization's technology and information assets must abide.”
Standards
Use of specific technologies
Guidelines
Best practice methodologies of securing systems
Procedures
Detailed steps to perform a specific task

8. NLRMP– IS Policies. http://dolr.nic.in
Audit Log Policy- Log will be available for analysis for security related events.
Clear Desk and Clear Screen Policy. Checks unauthosised access , loss or damage of information during and outside the normal working hours and when the systems are unattended
End-User Awareness Policy.-Security Awareness among the employees
Password Policy.- Ensures confidentiality of data
Vulnerability Scan Policy. Minimize the potential vulnerabilities and threats on CLR
Patch Management Policy.- Minimise system crashes and system compromises.
Anti-Virus Policy.-Protects organisations resources against intrusion by viruses and malwares
Physical Security Policy.-Prevents unauthorised physical intrusion.
Classification Policy.-Asset Classification
Backup Policy- Guidelines for backup of database
Media handling Policy – Ensures Movement of harware/ computer in authorised Manner
Access Control Policy-Ensures prevention of unauthorized access in CLR center
Incident Reporting- Standard way of reporting the incidents