J&K orders cyber-security upgrade across all government departments

The Jammu and Kashmir government has ordered all its departments, public sector undertakings and corporations to upgrade the cyber-security software on their computers. Circular No. 25-JK(GAD) of 2026, issued by the General Administration Department on October 28, 2026, directs the phased deployment of upgraded Unified Endpoint Management (UEM) and Endpoint Detection and Response (EDR) systems. The circular cites growing cyber-security threats to government IT infrastructure and the coming expiry of licence support for the current security software. A team of National Informatics Centre (NIC) cyber-security staff, called "Cyber Warriors", will visit government offices in phases to install the new systems.

Every government computer, from a clerk's desktop to a department's server, is a possible entry point for hackers. Endpoint security is the protection installed on those individual devices. Unified Endpoint Management (UEM) lets IT teams manage and update all of an organisation's devices from one place, making sure each has the right settings and patches. Endpoint Detection and Response (EDR) software watches devices for suspicious behaviour, such as malware or unauthorised access, and helps teams respond quickly when an attack happens.

Government networks hold sensitive data, from citizens' records to official communications. When licence support for security software expires, updates stop, leaving systems exposed to new threats. The circular's direction to upgrade before that happens is a practical step to avoid a gap in protection.

The order also fits a wider push in Jammu and Kashmir to tighten digital governance. An earlier directive told departments to shut official websites hosted on private domains and to use NIC government email addresses for official work. Together, these steps move departments onto centrally managed, government-controlled systems, which are easier to secure and monitor.

For citizens, the effect is mostly invisible but important: better protection for personal data held by government offices and fewer disruptions to online services. For IT professionals and start-ups in the cyber-security field, the circular is a reminder of the growing demand for endpoint security skills and services in the public sector.

Short-term: NIC teams will begin visiting government offices to install the software, and departments must cooperate. Staff may see new security software and settings on their computers.

Long-term: Centrally managed, up-to-date security across departments should reduce the risk of data breaches and ransomware attacks on government systems in the Union Territory.

Who is affected: Government employees and IT staff in Jammu and Kashmir; NIC's cyber-security teams; and citizens whose data and services depend on government systems.

Questions and Answers