KATHMANDU, Jan 27: The Government of Nepal is likely to face a recurring problem of cyber security threat due to its failure to use genuine hardware and software related to computer programs in its office system.
According to the National Cyber Security Center (NCSC) of the Ministry of Communication and Information Technology, the government bodies at present have been relying largely on unlicensed copy of the computer program, which might invite problems like hacking along with technical glitches in day-to-day operations.
Issuing a 102-point cyber security advisory to the government offices last week, the center instructed them to control the use of pirated softwares to prevent possible hacking of information related to the government services.
Anil Kumar Dutta, director general of the NCSC, told Republica that they issued the advisory to protect the information technology system of the government offices from possible cyber attack. According to him, the guidelines will also be useful to the general public to remain on the safe side from possible hacking.
Google developing code to make finding pirated movies a lot har...
There were several instances in the past in which a number of public service deliveries suffered cyber threats. In November, people faced significant difficulties as they were unable to access online passport forms and related services after the Department of Passports suffered a hacker attack and a virus infection in the software system, causing widespread inconvenience. Similar incidents with the passport service took place also in July 2017.
The Department of Transport Management (DoTM) also underwent hacking of its server a number of times. The hackers were found using the department’s official site for the illegal distribution of a large number of fake driving licenses.
As of now, most of the government bodies have been using the copied version of the software for their office operation. Switching to the authentic software however could require more budget for this purpose.
Dutta, however, said that authentic software ensures cyber security largely at the government offices. “Although using genuine software could give more financial burden to the government, it will ensure benefits in the long run,” said Dutta, adding that many government offices have already opted for using authentic platforms.
According to the NCSC, there are a number of open genuine sources including the search engines that do not require subscription. The Microsoft office systems that are largely used by the government offices are based on the pirated ones.
Dutta said the unauthorised software of applications do not support updates resulting in the problems in operations. “In this regard, the advisory recommends the government to rely on authentic applications,” he added.
The advisory has also recommended the government employees to strictly follow the non-trivial password policy while changing the password every three months. The government employees must not use passwords such as the names of family, relatives, friends, and mobile numbers, which can be easily traced.
The center has stated that the advisory was issued with the aim of avoiding problems such as hacking websites and data theft. It has also mentioned to make arrangements for mandatory security checks of information technology systems at least once a year and to make arrangements for its audit log.
The government employees need to use Private Browsing/Incognito Mode while using application, email and payments related to public services. They are also advised to use the latest edition of the internet browser and update them. Strict instructions not to save username and password in browsers are among the measures the government has sought from the civil servants.
