Contingency Plan in the event of defacement
A. Defacement Protection Policy
- The Bank of Baroda (Tanzania) Limited website (www\.bankofbaroda.co.tz) is security audited for application vulnerabilities and performance.
- Any application-level modification on the Bank of Baroda (Tanzania) Limited website (www\.bankofbaroda.co.tz) implies re-audit of the website.
- All the servers’ configuration and logs are monitored timely.
- Only system administrator users are allowed to access the servers for doing administration and configuration tasks.
- All servers are locked and net secured.
- Contents are updated through secured FTP using VPN.
B. Monitoring of defacement of The Bank of Baroda (Tanzania) Limited website (www.bankofbaroda.co.tz)
There are two ways of monitoring the defacement of the Bank of Baroda (Tanzania) Limited website.
a. The Cyber security division is continuously monitoring by analysing the log files. The Web Works Team at India in data Centre is also monitoring the websites at regular intervals for possible defacement or undesirable change in the Bank of Baroda (Tanzania) Limited website.
b. The Development team of India also monitors the website regularly. In case of any eventuality, whoever notices it first shall inform the Technical Manager and Web Information Manager on Phone as well as through email.
C. Actions to be taken after defacement
As soon as the Web Works Team receive the information regarding the defacement of the website, the following steps will be taken:
- Stoppage/partial stoppage of the website according to the degree of defacement.
- Analyzing log files and troubleshooting the source of defacement and blocking of the service.
- Analysing the type of defacement and fixing it.
- In case of complete loss of data, restoring the website data from backup or starting of website from DR site in case of long down time.
- Giving log files to the security division for analysis.
- Fixing of all vulnerabilities on the basis of security recommendations and re-auditing of applications.
- Restoring the affected /corrupted contents from the backup and restoring the site.