Contingency Management Plan

1. Purpose

This plan sets out how the iLearn portal responds to events that interrupt or harm the service, so that learners get a working portal back as quickly as possible and information is protected.

2. Events covered

• Loss of service because of a server, network or power failure.
• Unauthorised change to pages or data (defacement).
• Malware or a security breach, including loss of personal data.
• Attacks that overload the portal.
• Failure of a connected service such as sign-in or a university portal.
• Natural disasters or other events that affect the hosting site.

3. Who does what

4. Response steps

1. Detect and report. The incident is reported to the Web Information Manager through monitoring alerts, user reports at support@ilearn.gov.in or the support telephone number.
2. Assess. The incident is given a level (minor, serious or critical) based on how many users are affected, whether data is at risk, and whether the portal is down.
3. Contain. The affected component is isolated, for example by taking a page offline, blocking an address or disabling an account.
4. Inform. The Ministry is told at once for serious and critical incidents. A notice is placed on the portal and on its social media pages when learners are affected. Cyber incidents are reported to CERT-In within the time limit set in its directions.
5. Recover. The service is restored from clean backups or rebuilt, passwords and keys are changed if they may have been exposed, and the fix is applied.
6. Verify. The portal is checked for correct working, security headers, accessibility and data integrity before it is reopened to the public.
7. Review. A short report records the cause, the time taken, the actions and the changes needed to prevent a repeat. The plan is updated if needed.

5. Backups

Portal data and configuration are backed up regularly, and backups are stored away from the live server. Restoration from backup is tested at least once a year.

6. Communication

Learners are told about interruptions through a notice on the portal, the project social media pages and, where needed, e-mail from support@ilearn.gov.in. Messages say what has happened, what learners should do, and when the next update will be given.

7. Testing and review

This plan is tested by a drill at least once a year and is reviewed after every serious or critical incident.