Menu

Secured Infrastructure Implementation

The website is hosted in protected zones with the deployment of firewalls, Intrusion Detection Systems (IDS), and high-availability solutions to prevent unauthorized access and ensure business continuity.

Simulated penetration testing was conducted prior to launch to identify and mitigate security risks. Additional penetration testing was carried out post-launch to ensure continued protection.

A comprehensive vulnerability audit was performed before the website went live, addressing all known application-level vulnerabilities.

Server hardening has been carried out in accordance with the guidelines provided by the Cyber Security Division.

Security implementation has adhered to standards and recommendations from NIC, OWASP, and CERT-In.

Access to web servers is strictly controlled both physically and via network restrictions.

Audit logs for authorized physical access are maintained at two separate locations for accountability.

The web servers are configured with IDS/IPS systems and embedded system firewalls.

On production servers, internet browsing, email, and non-essential applications are disabled. Only necessary administrative functions are permitted.

Server passwords are changed every three months to minimize risk of unauthorized access.

All development is performed in a separate development environment.

New features and updates are thoroughly tested on a staging server before being deployed to the production environment.

Deployment to the production server is done securely using SSH and VPN through a centralized access point.

Content contributed from remote locations is authenticated and reviewed through a moderation workflow before publication.

All web content is scanned for intentional or unintentional malicious code before final upload.

Audit logs are maintained for Operating system activities, System and application access, and rejected access attempts, with exception reports flagged for review.

A dedicated help desk team continuously monitors the website to ensure the availability of web pages and that no unauthorized content or link changes.

All software patches, bug fixes, and upgrades are promptly reviewed and applied.

Application Security Audit: The website uses a custom-built Content Management System (CMS) tailored for dynamic content display. The CMS has been security audited by the Cyber Defence Authority (CDA) to ensure application-level security.

Server Audit: The application and database servers have undergone detailed security auditing and hardening. Physical and network-level restrictions are enforced on all access points. Servers are hosted behind application firewalls, making them invisible to public probing. Content uploads to NIC Data Centre servers are secured via SSH and VPN, following a single-point controlled deployment. No content is published without approval from the designated authority.

Data Security: Balmer Lawrie takes data protection seriously and has implemented comprehensive security protocols to protect user information from theft, loss, or unauthorized use.

Notice and Disclosures: Balmer Lawrie does not sell, trade, or share personally identifiable information with any unauthorized third party.

Data Quality

Accuracy: All efforts are made to ensure that content is correct and current. Identified inaccuracies are addressed immediately. Any systemic errors are escalated for swift resolution.

Timeliness: Dynamic updates (e.g., user account changes) are reflected by the next business day. Website content is subject to change without prior notice, in line with updates or policy revisions.

Access to www.balmerlawrie.com is governed by geographic access policies defined by the Web Information Manager (WIM). Access scenarios include:

• India-only access, with firewall rules restricting other regions.
• Global access, excluding high-risk countries such as X, Y, Z, based on cybersecurity intelligence.
• Custom access rules based on threat landscape and strategic requirements.
• Firewall rules are updated proactively to mitigate external threats.