RBI asks banks to beef up information security
Updated: Jul 02, 2014 04:28:22pm
Mumbai, Jul 2 (KNN) RBI has asked banks to beef up their information security taking advantage of IDRBT (Institute for Development and Research in Banking Technology) platform, which has been developed to aggregate security related incidents so that appropriate lessons can be learnt from the same.
IDRBT was established by the Reserve Bank of India in March 1996 as an autonomous centre for development and research in banking technology.
“Chief Information Security Officers (CISOs) of RRBs/StCBs/CCBs are advised to make use of the platform developed by IDRBT by reporting all Information Security related incidents in the above platform. This would not only enable building a repository of security incidents related information for the banking Industry but also help in fine-tuning policies relating to information security from time to time,” RBI said in a notification today.
Information on security, particularly security incidents, external attacks, internal compromises etc, is unique to each bank. Sharing of such information/ incidents/experiences would greatly benefit Regional Rural Banks (RRBs) / State and Central Co-operative Banks (StCBs/CCBs) in taking appropriate preventive/corrective measures.
As of now, information sharing among RRBs/StCBs/CCBs on these issues is not very prevalent, said RBI.
The National Security Council (NSC) has requested IDRBT to set up necessary facilities to enable sharing of information among banks and also dissemination of information on emerging security threats.
“Towards this end, IDRBT has developed a Security Incident Tracking Platform where banks would be able to report security incidents in an anonymous manner; thus keeping the information reported by the banks confidential,” RBI notification added.
The platform will be hosted on the INFINET and the access provided only to CISOs of respective banks. IDRBT is simultaneously making arrangements to gather global threat intelligence from various sources in coordination with CERT-In, said RBI. (KNN/SD)
IDRBT was established by the Reserve Bank of India in March 1996 as an autonomous centre for development and research in banking technology.
“Chief Information Security Officers (CISOs) of RRBs/StCBs/CCBs are advised to make use of the platform developed by IDRBT by reporting all Information Security related incidents in the above platform. This would not only enable building a repository of security incidents related information for the banking Industry but also help in fine-tuning policies relating to information security from time to time,” RBI said in a notification today.
Information on security, particularly security incidents, external attacks, internal compromises etc, is unique to each bank. Sharing of such information/ incidents/experiences would greatly benefit Regional Rural Banks (RRBs) / State and Central Co-operative Banks (StCBs/CCBs) in taking appropriate preventive/corrective measures.
As of now, information sharing among RRBs/StCBs/CCBs on these issues is not very prevalent, said RBI.
The National Security Council (NSC) has requested IDRBT to set up necessary facilities to enable sharing of information among banks and also dissemination of information on emerging security threats.
“Towards this end, IDRBT has developed a Security Incident Tracking Platform where banks would be able to report security incidents in an anonymous manner; thus keeping the information reported by the banks confidential,” RBI notification added.
The platform will be hosted on the INFINET and the access provided only to CISOs of respective banks. IDRBT is simultaneously making arrangements to gather global threat intelligence from various sources in coordination with CERT-In, said RBI. (KNN/SD)
Loading...
