Website Monitoring Plan

1. Purpose

The Website Monitoring Plan of Goa Human Rights Commission establishes a structured framework for continuous, proactive monitoring of the website to ensure that its performance, availability, quality, and user experience consistently meet the defined standards. Regular monitoring enables early detection of issues and rapid corrective action.

2. Scope

This plan covers all aspects of the website, including performance, functionality, content, accessibility, security, traffic, and user feedback.

3. Monitoring Parameters and Frequencies

3.1 Performance Monitoring

Parameter	Frequency	Benchmark
Website uptime / availability	24 × 7 (continuous)	≥ 99.5%
Page load time	Weekly	< 5 seconds (broadband); < 10 seconds (mobile)
Server response time	Daily	< 500 ms
Time to first byte (TTFB)	Weekly	< 800 ms
Downtime incidents	As and when occurs	Resolve within 1 hour (critical)

3.2 Functionality Monitoring

Parameter	Frequency
Broken link check	Monthly (automated), Quarterly (manual)
Form submissions / feedback forms	Weekly
Search functionality	Monthly
Cross-browser compatibility (major browsers)	Quarterly
Mobile / responsive behavior	Quarterly
Third-party integrations (analytics, payment, API)	Monthly

3.3 Content Monitoring

Parameter	Frequency
Content accuracy & currency	As per Content Review Policy
Grammar, spelling, consistency	Monthly sample audit
Compliance with organizational style guide	Quarterly
Multilingual content parity	Quarterly

3.4 Accessibility Monitoring

Automated accessibility scan — monthly (WCAG 2.1 AA).
Manual accessibility review — every 6 months.
Keyboard-only navigation test — quarterly.
Screen reader compatibility test — every 6 months.
Colour contrast audit — quarterly.

3.5 Security Monitoring

Malware and vulnerability scan — weekly (automated), quarterly (manual).
SSL / TLS certificate validity — continuous (alert 30 days before expiry).
Firewall and intrusion detection logs — daily review.
Failed login attempts / suspicious traffic — real-time alerts.
Penetration testing and security audit — at least annually or after major changes.

3.6 Traffic and Usage Monitoring

Analytics dashboard review — weekly.
Top pages, bounce rate, average session duration — weekly.
Geographic and device distribution — monthly.
Search queries (internal and external) — monthly.
Conversion and goal tracking — as applicable, monthly.

3.7 User Feedback Monitoring

Feedback forms and contact inquiries — reviewed daily.
Social media mentions and comments — monitored in near real time.
User surveys — conducted at least annually.
Complaints and grievances — acknowledged within 2 working days, resolved within 7 working days.

4. Monitoring Tools

The following categories of tools shall be employed (specific tools may be chosen based on organizational standards):

Uptime / availability monitoring tools (e.g., Pingdom, UptimeRobot, StatusCake).
Performance testing tools (e.g., Google PageSpeed Insights, Lighthouse, GTmetrix, WebPageTest).
Broken link checkers (automated crawlers).
Accessibility scanners (e.g., axe, WAVE, Siteimprove).
Analytics platforms (e.g., Google Analytics, Matomo).
Security scanners and SIEM tools.
Log management and alerting systems.

5. Escalation Matrix

Severity	Description	Response Time	Escalated To
Critical	Website down, data breach, security incident	Within 30 minutes	Web Information Manager, IT Head, CISO
High	Major functionality broken, key section unavailable	Within 2 hours	Web Information Manager, IT Team
Medium	Broken links, slow performance, minor content errors	Within 1 working day	Web Team
Low	Cosmetic issues, improvement suggestions	Within 5 working days	Web Team

6. Reporting

Daily: Uptime, security alerts, feedback review.
Weekly: Performance report, traffic report.
Monthly: Consolidated website health report — performance, content, accessibility, security, user engagement.
Quarterly: Executive summary report submitted to senior management.
Annual: Comprehensive review, audit findings, and improvement roadmap.

7. Roles and Responsibilities

Web Information Manager: Overall ownership of website monitoring; reviews reports; drives corrective action.
IT / Web Operations Team: Executes day-to-day monitoring, responds to alerts, implements fixes.
Security Team: Handles security monitoring, incident response, vulnerability management.
Content Team: Acts on content-related monitoring findings.
Senior Management: Reviews quarterly reports, sanctions resources for remediation.

8. Continuous Improvement

Findings from monitoring shall feed into a continuous improvement loop. Recurring issues shall be analyzed for root causes, and appropriate preventive measures shall be implemented. The monitoring plan itself shall be reviewed annually to incorporate new tools, technologies, and best practices.