BIS Security Management: Physical and Cyber Security in the New Platform

BIS Security Management: Physical and Cyber Security in the New Platform

BIS Security Management: Physical and Cyber Security in the New Platform

The BIS Manakonline Platform handles highly sensitive regulatory data — ISI licence records, factory inspection reports, enforcement actions, and personal data of lakhs of individuals. Security management is a critical component of both the platform and the physical operations it supports.

Security Management Dashboard Module

The Security Management Dashboard in Batch 5 covers physical security management at BIS facilities — monitoring visitor access, security personnel deployment, and incident tracking at headquarters and branch offices.

Cyber Security Architecture of the Platform

The new MOP platform has comprehensive cybersecurity requirements specified in the tender:

  • Next-Generation Firewall with IPS/IDS at network perimeter
  • Web Application Firewall (WAF) protecting all web-facing applications
  • DDoS Protection at L3/L4 (volumetric) and L7 (application) layers
  • Data Encryption at rest using dedicated Hardware Security Module (HSM)
  • All data in transit encrypted (TLS 1.2 minimum)
  • Identity and Access Management with fine-grained role-based access control
  • Automated Security Assessment (vulnerability scanning)
  • Comprehensive audit logging — all access and changes logged, tamper-proof, auditable

DPDP Act 2023 Compliance

The BIS platform must comply with India's Digital Personal Data Protection (DPDP) Act 2023. This means:

  • Consent for processing personal data of all individuals captured through the portal
  • Data principals can request access to their personal data
  • Data fiduciary obligations met for all personal data processed by BIS through the platform
  • Data localization: all personal data stored in India-based data centres

Implications for BIS Users

The robust cybersecurity architecture means: BIS application data is protected, personal information of manufacturers and individuals is secured, and BIS certification records cannot be tampered with or fraudulently modified by unauthorized parties. This protects the integrity of the entire certification ecosystem.