Security Discipline and Credential Management Guidelines for Access to Protected Systems (ICEGATE, ECCS and ACES-GST Portal)

X X   X X   Extracts   X X   X X

Full Text of the Document

X X   X X   Extracts   X X   X X

....02-06-2026 Standing Order No. 02/2026 Subject: Sharing of user IDs, passwords and one-time passwords (OTPs) issued for access to the CBIC Protected Systems is strictly prohibited - Reg. ************* 1. By Notification S.O. 9(E) dated 02.01.2026 [F. No. N-24015/9/2025- Computer Cell], the Central Government has declared ICEGATE (with its interconnected systems), ECCS and the ACES-GST p....

X X   X X   Extracts   X X   X X

Full Text of the Document

X X   X X   Extracts   X X   X X

.... credentials, passwords, one-time passwords (OTPs) and/or any other second factor of authentication shall never be shared with any other person, including colleagues, superiors, subordinates, contractual support resources, vendor representatives, or technical resources of any vendor. b) A recipient who is himself or herself an authorised person must use his or her own credentials, not the....

X X   X X   Extracts   X X   X X

Full Text of the Document

X X   X X   Extracts   X X   X X

.... 2.4 Workstation discipline a) Workstations shall not be left unattended in a logged-in state. The session shall be locked on every absence, however brief. b) Credentials shall not be entered on a workstation in the presence of another person looking on. 3. Procedure on suspected or actual compromise: - On any reason to believe or knowledge that credentials or the second fa....