Sun's Identity Solutions For Secure Banking Infrastructure
Vineet Mittal, Practice Head (Enterprise Web Services & Identity Management Practice) - Sun Microsystems, India

Synopsis: One of the key components towards creation of a secure banking infrastructure is to ensure that information assets are protected and the banks operations always understands who is accessing what, when and under which policies. Creation of an integrated identity provisioning and access policy infrastructure allows banks to change security policies, monitor user activities and be in control of the security infrastructure throughout the banking enteprise. It is a crucial step in creating a secure banking environment that can react to changes in business demands and government regulations

Security and Data Governance in Banks
Neeraj Dotel, Industry Manager (Financial Services) - Microsoft India

Synopsis: Deliberation on techniques to help customers understand security risks and take action to increase the security of their computing environments: viz; the latest technologies for security, management and data governance and discussion on how organizations can enhance the security of software-based systems. This session will also introduce one real-life case study- “Server Hardening of Windows 2000 RTGS systems in Banks”. In addition to Security, providing access to the right people and preserving the confidentiality of information is of paramount importance today especially in Financial Services. This session will also discuss these issues and how Data Governance technologies can be used to preserve the integrity of business critical information.

Operational aspects of IT Security, Disaster Recovery & Business Continuity Planning
Vivek Gupta, Security Consultant - IBM Global Services

Synopsis: The present society is undergoing Information Revolution. Information has become ubiquitous in our life and playing a major role in making decisions. The pattern of expenditure by the government and private organizations on Information Technology reflects the importance it has in playing the role of a force multiplier. It is therefore no surprise that high availability of Infrastructure has become the need of hour.

In the context of the IT Security, the transformation from an EDP Department to a full fledged IT Department, from EDP Officer to Chief Information Officer, is an indication of the role and importance IT is playing in the overall Business of the organisation. This also has brought to the forefront the need to safeguard and have controls to protect this infrastructure.

Blood, Sweat and Tears… How to manage regulatory and reputational risk for financial institutions
Dirk Mohrmann, President - WorldCompliance
download presentation

Synopsis: Since September 11, more than 100 countries have changed their AML laws, placing new responsibilities on financial institutions. US regulators have raised the bar by requesting KYC procedure certifications from overseas correspondent banks. Resulting Multi Million Dollar fines and and negative press coverage for a number of organizations have raised the stakes for members of the financial system, and established compliance as a major cost-factor in the annual budget. Mr. Mohrmann will discuss how banks face these new compliance responsibilities, and what are key steps for successful risk mitigation.

Case Studies from United States - Know your customer automated screening operations bench
Sujan Pandit, Program Manager - CIANT
download presentation

Synopsis: The United and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism (USA PATRIOT) Act was passed on the heels of 9/11, to address tracking and capturing the financial resources that fuel egregious terrorist activities. Since passage of this key legislation by the U.S. Congress, the age-old Banking Secrecy Act that regulated Anti-Money Laundering (AML) activities has taken on a new, much sharper focus on such compliance activities by U.S. Bank Regulators. Mr. Pandit presents case studies on how U.S. and foreign banks have in response automated to streamline compliance activities.

Anti Money Laundering & Compliance Frameworks for Global Banking
Hanuman Tripathi, Managing Director - InfraSoft Technologies

Synopsis: There are very few topics that have generated more interest in recent times in the banking circles than money laundering detection. While many banks focus on procedural and policy building measures for countering money laundering, it is equally critical to have an effective Anti Money Laundering (AML) technology system rolled out in the financial institution. The session on ‘Anti Money Laundering and Compliance Frameworks’ summarizes the impact on RBI guidelines with respect to AML and the role of technology to meet this increased challenge of detection and reporting of suspicious transactions.

Card Frauds – India Scenario
D V S Prakash, AVP (Product Management) - Financial Software & Systems
download presentation

Synopsis: Credit and Debit card volumes are increasing dramatically in India and Card spends are growing very fast over the last 1 – 2 years. In a recent study by NCEAR, Card issuance is expected to grow by 25%, retails sales volumes are projected to grow 30% over the next 3 years. While banks are concentrating on increasing spends and increasing the portfolio of customers, frauds on cards cannot be ignored. Growing card industry requires proactive management of frauds and mechanisms to counter fraudulent usage.

Managing Enterprise Asset Lifecycle
G N Nagaraj, Director (Sales) - Onward Novell

Synopsis: Corporate IT Infrastructure can be secured by effectively managing lifecycle of enterprise assets - be it human resource assets or hardware assets. This session will outline the effective ways of managing asset lifecycle and benefits one realizes on IT security by doing so. The session will also outline the various ways for implementing Secure Identity Management solutions to achieve this.

Information Security Management Systems BS 7799 Part 2 and ISO/EC 17799
John Hele, Global Product Head - BSI Management Systems
download presentation

Synopsis: The standards for the management of information security are:ISO/IEC 17799:2000 (updated in 2005)Code of Practice for Information Security & BS 7799 Part 2:2002 - Specification for Information Security Management Systems. These are to help and assist organisations in dealing with ALL types of information security such as: Printed or written on paper, Stored electronically, Transmitted by post or using electronic means & Verbal - spoken in conversations. “Whatever form the information takes, or means by which it is shared or stored, it should always be appropriately protected(ISO/IEC 17799).

Security LifeCycle Management - A holistic view of information protection in a banking environment
S Shankara Narayanan, Head (Information Security Practice) - 3D Networks
download presentation

Synopsis: The recent spur of breach of confidentiality, integrity and privacy within the BFSI segment has been driving its stakeholders to ensure seamless inclusion of Information Security Lifecycle management within their regimen of ‘Business as Usual’. This has in-turn driven the need for holistic approach to be made available through 3rd party vendors/consultants who can etch out a suitable portfolio of Information Assurance within the core processes of the Banking world. Most banks and financial institutions have come to realize that security is more than a necessary expense. It’s a business investment like any other, one that must be made carefully and measured for the value it delivers. The Reserve Bank of India has prescribed certain guidelines for Indian nationalized banks, which makes it mandatory for them to adhere to certain security parameters.

Changing from compliance to assurance in electronic security
Venugopal R Iyengar, Practice Director (eSecurity Competancy & Consulting Services) - TCS
download presentation 1 | download presentation 2

Synopsis: Web application chronology, continuously evolving threats, Standards and best practice framework enterprise security managent, need for data obfuscation for tomorrows technology, red book to common criteria ISO 15408. Concluding to assurance from compliance.

Locknote Panel Discussion:
Cyber Crime, Security & Compliance: It's issues and the future for the Banking Industry
Chairperson: Nandkumar Saravade, Director (Cyber Security & Compliance) - NASSCOM
Satish Warrier, Head (Information Security) - IDBI Ltd.
Venugopal R Iyengar, Practice Director (eSecurity Competancy & Consulting Services) - TCS
Srivalsan Ponnachath, Director (Financial Services) - Sun Microsystems