Standards

Security and standards

This portal is built to align with international good practice. Alignment is not a certificate. SNDT has not been certified to ISO/IEC 27001 or any other ISO management-system standard. Last updated 9 October 2026.

Information security

Controls follow the intent of ISO/IEC 27001 and ISO/IEC 27002: unique accounts, hashed passwords, role checks, a locked document store, an audit log, backup from the office settings, and session cookies that are not readable by scripts. Public and signed-in forms also require a security check and a honeypot field, and they refuse a post that arrives too fast to be human.

Privacy

The privacy notice follows the intent of ISO/IEC 27701 and the Digital Personal Data Protection Act, 2023: a named purpose, limited access, a retention period, and a grievance contact at the Kozhikode office.

Accessibility

The interface is designed against WCAG 2.2 level AA, published as ISO/IEC 40500, and the human-accessibility guidance in ISO 9241-171. See the accessibility statement.

Web discovery

A sitemap, robots file, guide for language models and AI access note describe what may be indexed. Member and office areas are closed to crawlers. A security contact file is published for the website root at /.well-known/security.txt.

Report a weakness

Email neurodiagnosticsociety@gmail.com with the subject “Security”. Please give us a reasonable time to correct a problem before describing it in public. Do not attempt to access another member’s records.