Security
Infrastructure & Resilience.

StatusOfficial
Last UpdatedApril 22, 2026

1. Our Commitment to Security

ARJUN — AI for Resilient Jobs, Urban Air Quality & Next-Gen Skills Council ("ARJUN") is committed to safeguarding the integrity, confidentiality, and availability of all data processed, stored, and transmitted through our Platform. As a government initiative handling environmental, public health, and workforce data, we maintain rigorous security standards aligned with industry best practices and applicable Indian regulatory requirements.

2. Security Architecture

Encryption

  • TLS 1.3 encryption for all data in transit
  • AES-256 encryption for data at rest
  • HSTS enforcement across all endpoints
  • Certificate transparency monitoring

Infrastructure

  • Enterprise-grade cloud infrastructure
  • Edge network distribution via Cloudflare
  • DDoS mitigation and rate limiting
  • Automated failover and disaster recovery

Monitoring

  • 24/7 automated threat detection
  • Real-time security event logging
  • Anomaly detection on API endpoints
  • Periodic penetration testing

Access Controls

  • Role-based access control (RBAC)
  • Multi-factor authentication (MFA)
  • Principle of least privilege
  • Quarterly access reviews & audit trails

3. Data Protection Measures

We implement the following data protection measures in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and related Indian regulatory frameworks:

  • Data Minimization: We collect only such personal data as is strictly necessary for the stated purposes;
  • Purpose Limitation: Personal data is processed solely for the purposes explicitly communicated to the data principal;
  • Storage Limitation: Personal data is retained only for the period necessary to fulfil the purpose of processing, subject to statutory retention requirements;
  • Data Integrity: We maintain reasonable accuracy of data through periodic validation and correction mechanisms;
  • Secure Disposal: Data that has served its purpose is securely deleted using industry-standard sanitization protocols.

4. Incident Response

ARJUN maintains a formal Incident Response Plan (IRP) to ensure rapid and effective handling of security incidents. Our incident response process includes:

01

Detection & Identification

Automated monitoring systems detect and classify potential security events in real-time.

02

Containment

Affected systems are immediately isolated to prevent lateral movement and limit impact.

03

Investigation & Analysis

Root cause analysis is conducted with comprehensive forensic examination of affected systems.

04

Remediation

Vulnerabilities are patched, systems are hardened, and preventive controls are strengthened.

05

Notification

Affected parties and regulatory authorities are notified in accordance with applicable law.

06

Post-Incident Review

Comprehensive review and documentation to improve security posture and prevent recurrence.

5. Responsible Disclosure

Report a Vulnerability

We value the security research community and encourage responsible disclosure of any vulnerabilities discovered on our Platform.

Email Report

Disclosure Guidelines:

  • Provide a detailed description of the vulnerability, including steps to reproduce;
  • Allow reasonable time for us to investigate and address the issue before public disclosure;
  • Do not access, modify, or delete data belonging to other users;
  • Do not perform denial-of-service attacks or exploit vulnerabilities;
  • Act in good faith to avoid privacy violations and disruption to production systems.

6. Compliance & Certifications

Our security practices are aligned with:

  • Information Technology Act, 2000 and associated rules;
  • Digital Personal Data Protection Act, 2023;
  • National Cyber Security Policy of India;
  • CERT-In (Indian Computer Emergency Response Team) directives;
  • ISO/IEC 27001 information security management principles.

7. Security Updates

We continuously update our security measures to address emerging threats and evolving best practices. This page will be updated to reflect any material changes to our security posture or practices.

8. Contact

For security-related inquiries or to report a vulnerability:

Chief Information Security Officer — ARJUN Council

Civil Secretariat, Sector 1, Chandigarh, Haryana, India

Email: security@arjun.haryana.gov.in

Phone: +91 172 274 1234

Institutional transparency and data sovereignty are at the core of ARJUN.