Delhi Govt Cyber Security Advisory 2026: Mandatory NIC Email Rules

Delhi Govt Cyber Security Advisory 2026: Mandatory IT Rules

The Information Technology Department of the Government of NCT of Delhi issued a highly urgent cybersecurity advisory in February 2026, directing all administrative departments, local bodies, and commissions to secure their digital infrastructure against rising cyber threats.

The directive addresses critical vulnerabilities in daily administrative operations. In practice, department heads frequently face severe audit objections if official files or sensitive departmental data are transmitted through unauthorized private email servers or third-party messaging applications.

Who is responsible for implementing these IT protocols?

All Additional Chief Secretaries, Principal Secretaries, Heads of Departments (HoDs), and administrators of Local Bodies under the Delhi Government are directly responsible for enforcing these compliance measures within their respective jurisdictions.

How To Secure Office IT Infrastructure In 2026

1. Nominate an Assistant Chief Information Security Officer (ACISO) as the dedicated Single Point of Contact (SPoC) for the department on priority.
2. Obtain and maintain valid security audit certificates for all active government websites and web applications.
3. Transition all official digital communication exclusively to the designated NIC email platform.
4. Enable Multi-Factor Authentication (MFA) and enforce strong password policies for accessing any sensitive data.
5. Install updated antivirus software, regularly schedule data backups, and strictly avoid using any pirated applications on office machines.
6. Ensure machines are properly shut down before leaving the office premises.

What is the protocol for reporting a cyber incident?

If a security breach or suspicious activity occurs, officials must report the incident immediately. Delays in reporting compromise the government’s ability to contain the threat and secure sensitive citizen data.

Official Communication and Software Compliance Mandates

The advisory explicitly restricts the digital tools and communication channels government employees are permitted to use for official administrative work to prevent unauthorized data exfiltration.

Are officers allowed to use third-party apps for official files?

No. The IT Department explicitly directs all staff to avoid third-party communication channels for official purposes. Government business must remain confined to the secure, monitored environment provided by the National Informatics Centre (NIC).

Frequently Asked Questions