Project Requirements - Archaeological Survey of India

Request for Proposal for establishing e-Governance Systems
8.2 System Security Requirements
development of a system based on previously developed
government accounts software, and customization to the needs of
ASI. Implementation is expected to be completed within 6 months
from the date of selection of the SI.
It is expected that the solution implemented by the SI will be run in
parallel with the existing systems for a period of at least 6 months in
order to ensure that the output is the same in either case. The SI
will also be required to migrate data from the existing systems to the
new systems.
8.2.1 Security features should be compliant withthe e-Governance Security Standards
Framework.
8.2.2 All systems should have integrated security features that areconfigurable by the
system administrator tocontrol access to the application, functionalmodules,
transactions, and data.
8.2.3 Public key verificationmethods should be followed for verifying that the contents
of a document have not been tampered with, and allowing the receiver to confirm
the identity of the sender.
8.2.4 The applications should require theuse of unique user IDs and passwords
forauthentication purposes.
8.2.5 The application should allow for the following:
a. the enforcement of password standards
b. the establishment of a specified periodfor password expiration, and
c. the prohibition of recent passwordreuse
8.2.6 System administrator should be able to define functional access rights and data
access rights byassigned user ID, functional role, andowner organization.
8.2.7 The systems should permit thesystem administrator to assign multiplelevels of
approval to a single user.
8.2.8 System administrator should be able to restrict access tosensitive data elementsby
named user, groups of users, orfunctional role.
8.2.9 System should have audit logging capability to record accessactivity, including the
following:
RFP Volume 1:Project Requirements P a g e | 39