Overview - Information & Cyber Security
The Information and Cybersecurity Department at PFRDA plays a crucial role in safeguarding the organization's information assets. This department is responsible for protecting these assets from unauthorized access, use, disclosure, disruption, modification, or destruction. By managing all aspects of information and cybersecurity within PFRDA-regulated system, the department ensures the integrity, confidentiality and availability of critical information.
Key Functions
1. Developing and Implementing Cybersecurity Policies and Procedures
- The department develops and implements a comprehensive cybersecurity program that outlines PFRDA's security goals and objectives. This includes creating specific cybersecurity policies, procedures, standards, and guidelines for both internal implementation and Regulated Entities.
2. Developing and Implementing Security Architecture
- The department is responsible for designing and maintaining a robust security architecture for the organization.
3. Conducting Security Assessments and Audits
- Regular security assessments and audits are conducted to identify and address gaps in the cybersecurity policy and its implementation. The cybersecurity department collaborates with other departments to provide cybersecurity inputs and assist in supervising regulated entities (REs) or intermediaries.
4. Responding to Cybersecurity Incidents
- The department coordinates responses to security incidents, analyzes them to prevent recurrence, and reports incidents to relevant organizations.
5. Creating Cybersecurity Awareness
- Raising awareness about cybersecurity best practices among stakeholders is a key function. The department issues advisories and alerts to its stakeholders to keep them informed about the latest cybersecurity threats and best practices.
6. Interaction with other Regulatory Bodies and external Cybersecurity Institutes
- The department interacts with other regulatory bodies and external agencies such as CERT-In, NCIIPC, DSCI, etc. to maintain and enhance the organization's information security.
Overview - Information Technology
The Information Technology (IT) Department at PFRDA is essential in ensuring the smooth operation and optimal utilization of the organization's technological resources. This department is responsible for managing a wide range of IT infrastructure components, including hardware, software, networks, and applications. By providing comprehensive IT support, the department enables PFRDA to achieve its operational goals efficiently and securely.
The IT Department's role involves strategic planning, procurement, and implementation of advanced technologies and new initiatives to enhance the organization's capabilities. The department ensures that all IT systems are secure, reliable, and up to date, thereby supporting the overall mission of PFRDA.
Key Functions
1. IT Equipment Maintenance and Support
- The IT department ensures that all IT equipment is maintained and supported to function optimally. This includes regular maintenance, troubleshooting, and repair of hardware components.
2. Procurement of IT Goods and Services
- The department handles the procurement of IT goods and services, ensuring that the organization has access to the latest technology and resources required for its operations.
3. PFRDA Websites/Portal including email and eOffice Administration and Maintenance
- The IT department administers and maintains PFRDA's websites and portals, ensuring they are secure, up-to-date, highly accessible and user-friendly.
4. Email, eOffice and video conferencing administration and maintenance
- Managing and maintaining email, eOffice system and video conferencing support are other key responsibility areas of IT department.
5. Network Administration and Maintenance
- The department is responsible for the administration and maintenance of the organization's network infrastructure, ensuring connectivity, security, and performance.
6. Cloud Account Administration and Maintenance
- The IT department manages cloud accounts of the authority, ensuring that cloud services are utilized effectively.