30 Minute Interview

A security handbook for banks

Deepak Maheshwari, Director, Corporate Affairs, Microsoft India, shares his thoughts with Neeraj Gandhi, on the recently introduced Microsoft Platform Security and Audit Handbook 2008.

Deepak Maheshwari

What was the motive behind introducing this book?

Technology today has become an integral part of almost all financial transactions, be it in banks or other financial institutions. In such a scenario, it is important to ensure that certain guidelines are followed with respect to the usage of this technology in order to ensure that money remains safe and secure, compliance is adhered to, and that privacy of the customer’s financial information is maintained. Securing this information is important not only to comply with the law, but also to build trust between the customers and the financial institution.

Does the book provide guidance on security risk assessment?

The book has been launched by Microsoft in partnership with PricewaterhouseCoopers. What this book essentially does is provide guidance to both auditors and financial institutions to help them assess the level of security risks, and evaluate the adequacy of the institution’s risk management. It tells the banks on how to work on different Microsoft platforms and ensure whether they comply with guidelines or not. It also comes in handy for auditors to check whether a particular bank is following RBI guidelines. Microsoft has customized the banking security audit guidelines released by the RBI to specific technology platforms.

What are these different Microsoft platforms?

The handbook includes the key controls that should be reviewed during a systems review for three key Microsoft platforms: Windows Desktop Operating Systems, Windows Server Operating Systems, and SQL Server Database incorporating various versions.

What about Linux keeping in mind Microsoft’s tie-up with Novell?

Presently we are focusing on these three Microsoft platforms only.

How does this book work for the banks?

This book would help the banks streamline their processes, help them adhere to RBI guidelines and in turn would also help the auditors. I would also mention that it is only a facility for the banks, and it is entirely up to them to use it or not. It is purely on a voluntary basis. It is available to the banks free of cost, and can be downloaded from the Microsoft Web site.

What are your expectations from this book?

Presently, banks like HDFC, SBI and also the Indian Bank Association is using this handbook. We are eagerly waiting for their feedback. Once we get that, then we would work on their suggestions and incorporate any changes if needed.