# GIGW & STQC website audit: Guidelines for Indian Government Websites and Apps (GIGW 3.0) and STQC certification

> Quality, accessibility and security requirements for government websites and apps.

URL: https://securei3.com/standards/gigw-stqc/
Category: India regulations: Law or regulation
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


GIGW 3.0 sets requirements for Indian government websites and mobile apps (content, accessibility aligned to WCAG, usability, security and lifecycle management) with compliance certified through STQC. Agencies building government portals need security audits and accessibility testing before launch.

We run GIGW gap assessments, coordinate security audits and help developers fix accessibility and security issues.

## Who it is for

- Government departments and PSUs
- Agencies building government websites and apps

## Benefits

- Faster launch approvals
- Accessible, secure public services

## How Secure iQube helps

1. **Applicability and scoping**: Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
2. **Data and process mapping**: Build a record of processing or control inventory so obligations can be tied to real systems and owners.
3. **Gap assessment**: Measure current practice against each obligation and rank the gaps by legal and business risk.
4. **Remediation roadmap**: Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
5. **Evidence and ongoing monitoring**: A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.

## Frequently asked questions

### Is a security audit required before hosting?

Government websites are generally expected to undergo a security audit by a CERT-In empanelled auditor before hosting, alongside GIGW compliance.

Related: https://securei3.com/standards/cert-in-directions/, https://securei3.com/standards/iso-27001/

Contact: https://securei3.com/contact/: info@securei3.com