The handbook is for security professionals and auditors

Can you throw some light on the security handbook released by Microsoft in

partnership with PricewaterhouseCoopers? What was the driver behind it?



This is a handbook for security professionals and auditors, aimed at

providing guidance to the auditors and the financial institutions when it comes

to assessing and evaluating security risks and the adequacy of the risk

management exercise being undertaken by the organization. We have customized the

banking security audit guidelines released by Reserve Bank of India to specific

technology platforms.

But, why the focus on the financial sector?



The banks and financial institutions have been the epitome of trust. One

reposes trust in them. And, when these organizations are using technology,

including IT, they need to ensure that whatever they are doing is secured and

trustful. There was feedback from our customers and partners that while they are

using a lot of IT systems, they dont know how to secure according to the best

manner and the best practices that are there.

So, is it relevant only for the banking and financial sector?



The fact is that the banking regulations by RBI mandate certain things. Then

there is the whole trust factor and high stakes involved. Besides, this sector

is usually ahead in terms of technology. Therefore, BFSI will be at the

forefront in terms of usage. But, while the security handbook is for the

financial sector, and the prompt for this came from the needs of the banking and

financial services industry, it can be equally relevant in the other industries

as well. Therefore, the handbook for the BFSI sector is not restricted. It can

be very well used in other organizations as well.

Which are the Microsoft products covered in the handbook?



The handbook includes all the key controls that should be reviewed during a

systems review for three key Microsoft Platforms: Windows Desktop Operating

Systems, Windows Server Operating Systems, and SQL Server Database incorporating

various versions. We see it as a step toward simplifying our technology and as a

value add for our customers. The feedback from the users has been very

encouraging.

Shipra Malhotra



shipram@cybermedia.co.in