The All India Institute of Medical Sciences (AIIMS), Delhi is working on devising a cyber security policy for the hospital and other wings with guidance from investigating agencies, official sources said on Thursday, November 1 even as its servers remained down for the ninth day following a ransomware attack.

Recommendations have been sought from the investigating agencies, they said, as stated in a report by PTI. Besides, a Chief Information Security Officer (CISO) is being appointed on an ad-hoc basis for emergency cyber security measures to be taken at the institute to restart the e-Hospital services and prevent such incidents in the future, PTI reported.

Internet services yet to be restored

Meanwhile, internet services at the AIIMS continued to be blocked as per the recommendations of the investigating agencies. Patient care services including outpatient, laboratory, inpatient and emergency, etc. are operating in manual mode, PTI reported.

On Tuesday, November 29, AIIMS authorities informed that the e-Hospital data has been restored on the servers. They said the network is being sanitised before the services can be restored. The process is taking some time due to the volume of data and a large number of servers/computers for the hospital services. Measures are being taken for cyber security, the AIIMS said in a statement issued on Tuesday.

A case of extortion and cyber terrorism was registered by the Intelligence Fusion and Strategic Operations (IFSO) unit of the Delhi Police on November 25 in connection with the ransomware attack.

The Indian Computer Emergency Response Team within the Ministry of Electronics and Information Technology, Delhi Cyber Crime Special Cell, Indian Cyber Crime Coordination Centre, Intelligence Bureau and Central Bureau of Investigation, among others are investigating the cyber attack.