16.1 Website Security Policy

https://www.nrct.go.th/Website-Security-Policy

Measures and methods for maintaining website security

NRCT acknowledges the significance of maintaining website security in order to protect user data from being destroyed or accessed by malicious individuals or those who do not have permission to do so. Therefore, we have taken steps to secure the website by implementing advanced data security standards and Secure Socket Layer technology. SSL is a technology that enables 128-bit code-based data access. Each transition through the network of the National Research Council of Thailand employs encryption to encrypt data transmitted over the Internet. Encryption is used as the foundation for data security, rendering data interceptors in transit useless. Users may identify the protocol based on its webpage name https://.

Additional technologies used to maintain security

• Firewall: A software system that allows only authorized users or those approved by the National Research Council to access information through the Fire Wall.
• Scan Virus: In addition to installing highly effective anti-virus software and regular updates on every computer that serves the service, the National Research Council of Thailand also installs Scan Virus Software on the server.
• Cookies: Small computer files that store temporary information on the user's computer for the purpose of facilitating communication and enhancing its efficiency. However, the National Research Council is well aware of the privacy of its service users and therefore avoids the use of cookies; however, if the use of cookies is unavoidable, the company will carefully consider the security and privacy of the Users' primary service and will be aware of these factors.
• Automatic Logoff: To use the National Research Council's services, logoff must be performed after each use. For the user's safety, in the event they forget to log off, the system will automatically log them off at the appropriate time for each service.

Advice on maintaining security

Although the National Research Agency has high standards of technology and security methods to help prevent unauthorized access to your personal or confidential information, as described above, it is evident that there is currently no security system that can guarantee that your data will not be lost or accessed by unauthorized parties. Therefore, you should also adhere to the following security recommendations:

• Use caution when downloading software from the Internet. Before logging in to use the service, you should verify that the website's address is correct to avoid any possibility of impersonation.
• Install a virus detection system and attempt to enhance the program. Always check for virus updates on your computer.
• Install a personal firewall program to protect your computer from cracker and hacker attacks.