(Audio) Audit Recording

2:46

S… Speaker 1 ((Audio) Audit Recording )

I don't have to worry about it. I don't have to worry about it.

5:37

S… Speaker 2 ((Audio) Audit Recording )

Hi.

5:37

S… Speaker 2 ((Audio) Audit Recording )

Hi.

5:38

S… Speaker 2 ((Audio) Audit Recording )

Hi Kunal.

5:39

S… Speaker 3 ((Audio) Audit Recording )

Hi.

5:40

S… Speaker 2 ((Audio) Audit Recording )

Hi everyone.

5:43

S… Speaker 4 ((Audio) Audit Recording )

Hi Arpeth.

5:43

S… Speaker 4 ((Audio) Audit Recording )

Hi Ekta.

5:44

S… Speaker 1 ((Audio) Audit Recording )

Hello.

5:45

S… Speaker 5 ((Audio) Audit Recording )

Hi Simu.

5:46

S… Speaker 2 ((Audio) Audit Recording )

So Siva,

5:48

S… Speaker 2 ((Audio) Audit Recording )

somebody is joining from our IT team or is it only

5:52

S… Speaker 5 ((Audio) Audit Recording )

you? Hi Sima.

5:53

S… Speaker 5 ((Audio) Audit Recording )

Nishant here.

5:54

S… Speaker 5 ((Audio) Audit Recording )

Both are in the same room.

5:55

S… Speaker 2 ((Audio) Audit Recording )

Oh great,

5:56

S… Speaker 2 ((Audio) Audit Recording )

great. Hi Nishant.

5:58

S… Speaker 2 ((Audio) Audit Recording )

Kunal,

5:59

S… Speaker 2 ((Audio) Audit Recording )

Sivakumar and Nishan are from our IT team.

6:02

S… Speaker 2 ((Audio) Audit Recording )

Sivakumar and Nishan are from

6:08

S… Speaker 2 ((Audio) Audit Recording )

the audit.

6:10

S… Speaker 2 ((Audio) Audit Recording )

team of indusin bank they wanted some clarity on

6:14

S… Speaker 2 ((Audio) Audit Recording )

our you know IT applications for the HRMS

6:18

S… Speaker 2 ((Audio) Audit Recording )

system okay so that's the reason we have both

6:23

S… Speaker 2 ((Audio) Audit Recording )

the teams together so Kunal I think over to you

6:27

S… Speaker 2 ((Audio) Audit Recording )

whatever questions you have whatever clarifications you have our team is there our

6:31

S… Speaker 2 ((Audio) Audit Recording )

IT team is there

6:33

S… Speaker 6 ((Audio) Audit Recording )

Yes.

6:33

S… Speaker 6 ((Audio) Audit Recording )

Okay.

6:34

S… Speaker 6 ((Audio) Audit Recording )

So from my team,

6:36

S… Speaker 6 ((Audio) Audit Recording )

Arpit and Ekta,

6:37

S… Speaker 6 ((Audio) Audit Recording )

they both will move forward.

6:40

S… Speaker 3 ((Audio) Audit Recording )

Yes.

6:44

S… Speaker 6 ((Audio) Audit Recording )

So Arpit and Ekta,

6:46

S… Speaker 6 ((Audio) Audit Recording )

please continue.

6:46

S… Speaker 7 ((Audio) Audit Recording )

Yes,

6:48

S… Speaker 1 ((Audio) Audit Recording )

sure. So I would like to ask you actually

6:52

S… Speaker 1 ((Audio) Audit Recording )

like to understand how do you maintain or

6:56

S… Speaker 1 ((Audio) Audit Recording )

approve?

6:59

S… Speaker 1 ((Audio) Audit Recording )

uh or document information security policy which covers

7:03

S… Speaker 1 ((Audio) Audit Recording )

like the personal and the system which is used to deliver adrenaline

7:07

S… Speaker 1 ((Audio) Audit Recording )

hsms hr like at the hr software of the bank can

7:11

S… Speaker 1 ((Audio) Audit Recording )

you just help me like the with the version and the approval date so

7:20

S… Speaker 4 ((Audio) Audit Recording )

all

7:24

S… Speaker 4 ((Audio) Audit Recording )

our policy documents will be available

7:28

S… Speaker 4 ((Audio) Audit Recording )

So, what is the project?

7:29

S… Speaker 4 ((Audio) Audit Recording )

It will be annually approved by our

7:33

S… Speaker 4 ((Audio) Audit Recording )

CDO.

7:34

S… Speaker 3 ((Audio) Audit Recording )

So,

7:39

S… Speaker 5 ((Audio) Audit Recording )

Seema, is it possible for you to share those details with us over

7:43

S… Speaker 5 ((Audio) Audit Recording )

the same mail that must have contacted you?

7:47

S… Speaker 5 ((Audio) Audit Recording )

Do you want to showcase the

7:51

S… Speaker 5 ((Audio) Audit Recording )

policy or?

7:52

S… Speaker 5 ((Audio) Audit Recording )

Yeah,

7:55

S… Speaker 5 ((Audio) Audit Recording )

the version that you guys are using.

7:58

S… Speaker 5 ((Audio) Audit Recording )

Okay.

7:59

S… Speaker 3 ((Audio) Audit Recording )

Okay,

8:02

S… Speaker 5 ((Audio) Audit Recording )

so I'm waiting for that.

8:05

S… Speaker 5 ((Audio) Audit Recording )

It's fine if you don't show it right now.

8:07

S… Speaker 5 ((Audio) Audit Recording )

Just share it over mail.

8:09

S… Speaker 5 ((Audio) Audit Recording )

That's not a problem actually.

8:11

S… Speaker 5 ((Audio) Audit Recording )

We will send the link actually.

8:13

S… Speaker 5 ((Audio) Audit Recording )

Okay.

8:13

S… Speaker 5 ((Audio) Audit Recording )

So in this link is all of the documents area.

8:15

S… Speaker 5 ((Audio) Audit Recording )

Okay.

8:16

S… Speaker 5 ((Audio) Audit Recording )

That works.

8:18

S… Speaker 5 ((Audio) Audit Recording )

Just make sure you do it after the call,

8:22

S… Speaker 5 ((Audio) Audit Recording )

right? Yes.

8:23

S… Speaker 5 ((Audio) Audit Recording )

Yes.

8:27

S… Speaker 1 ((Audio) Audit Recording )

Yeah, thank you.

8:28

S… Speaker 1 ((Audio) Audit Recording )

Now the next question I would like to ask you about is like how

8:32

S… Speaker 1 ((Audio) Audit Recording )

do you conduct the periodic VAPT of the environment that is

8:37

S… Speaker 1 ((Audio) Audit Recording )

used, you know,

8:37

S… Speaker 1 ((Audio) Audit Recording )

to develop or build the support of Adrenaline

8:41

S… Speaker 1 ((Audio) Audit Recording )

HSMS and remedial to a defined SLA?

8:46

S… Speaker 3 ((Audio) Audit Recording )

Actually,

8:49

S… Speaker 5 ((Audio) Audit Recording )

this is like application team only conducted the VAPT.

8:53

S… Speaker 5 ((Audio) Audit Recording )

Okay, so they conducted annually only the VAPT testing for all

8:57

S… Speaker 5 ((Audio) Audit Recording )

the applications.

8:58

S… Speaker 5 ((Audio) Audit Recording )

Yeah.

8:59

S… Speaker 5 ((Audio) Audit Recording )

We are the part of the IT security,

9:02

S… Speaker 5 ((Audio) Audit Recording )

not the application team,

9:03

S… Speaker 5 ((Audio) Audit Recording )

IT security.

9:04

S… Speaker 3 ((Audio) Audit Recording )

Yes,

9:16

S… Speaker 5 ((Audio) Audit Recording )

yes, that's confirmed actually is the annually only conducted VAPT.

9:19

S… Speaker 3 ((Audio) Audit Recording )

Okay.

9:20

S… Speaker 5 ((Audio) Audit Recording )

But we don't have the document for the application related.

9:23

S… Speaker 3 ((Audio) Audit Recording )

Okay.

9:25

S… Speaker 3 ((Audio) Audit Recording )

If

9:30

S… Speaker 5 ((Audio) Audit Recording )

you want the document means the VAPT for the network and the application means already

9:35

S… Speaker 5 ((Audio) Audit Recording )

we will be given the site for the trust center site.

9:37

S… Speaker 5 ((Audio) Audit Recording )

So please validate it.

9:38

S… Speaker 5 ((Audio) Audit Recording )

So all the application VAPT reports and the SOC reports there.

9:55

S… Speaker 1 ((Audio) Audit Recording )

background checks like completed for all the person is arm

9:59

S… Speaker 1 ((Audio) Audit Recording )

on the

10:00

S… Speaker 1 ((Audio) Audit Recording )

bank like Adrenaline HSMS work prior to deployment

10:04

S… Speaker 3 ((Audio) Audit Recording )

like

10:09

S… Speaker 1 ((Audio) Audit Recording )

our background check for all the person is done before like

10:13

S… Speaker 1 ((Audio) Audit Recording )

before they getting deployed to a particular project yes

10:23

S… Speaker 4 ((Audio) Audit Recording )

yes yes okay

10:29

S… Speaker 3 ((Audio) Audit Recording )

just give

10:37

S… Speaker 8 ((Audio) Audit Recording )

me a second please okay

10:48

S… Speaker 8 ((Audio) Audit Recording )

Next is,

10:49

S… Speaker 1 ((Audio) Audit Recording )

have all the personals on the bank engagement signed

10:53

S… Speaker 1 ((Audio) Audit Recording )

individual NDAs and completed

10:58

S… Speaker 1 ((Audio) Audit Recording )

the Periodical Security Awareness Training?

11:13

S… Speaker 5 ((Audio) Audit Recording )

security awareness training and the infosec policy training everything is once a new

11:18

S… Speaker 5 ((Audio) Audit Recording )

on while a new onboarding users join means like the all the man all

11:22

S… Speaker 5 ((Audio) Audit Recording )

the things have to be mandatory so need to complete all the things security awareness infosec

11:26

S… Speaker 5 ((Audio) Audit Recording )

training all that the possible things need to be completed okay and after that also the quarterly

11:30

S… Speaker 5 ((Audio) Audit Recording )

basis we send the email to the all the users security awareness emails also

11:43

S… Speaker 1 ((Audio) Audit Recording )

Is there a time bound process like to revoke bank access

11:47

S… Speaker 1 ((Audio) Audit Recording )

and recover the credentials?

11:49

S… Speaker 1 ((Audio) Audit Recording )

Like when our resources roll off the Adrenaline HSMS engagement?

11:53

S… Speaker 5 ((Audio) Audit Recording )

In this

12:01

S… Speaker 5 ((Audio) Audit Recording )

bank there is no like the on -prem server only,

12:03

S… Speaker 5 ((Audio) Audit Recording )

not in our end actually.

12:05

S… Speaker 5 ((Audio) Audit Recording )

All the data and the servers are related from your side only.

12:08

S… Speaker 5 ((Audio) Audit Recording )

So only the connectivity is the VPN connection only.

12:11

S… Speaker 5 ((Audio) Audit Recording )

Through the VPN connectivity only our support team will take the

12:15

S… Speaker 5 ((Audio) Audit Recording )

service from your end.

12:18

S… Speaker 2 ((Audio) Audit Recording )

So Ekta,

12:19

S… Speaker 2 ((Audio) Audit Recording )

Indusim bank is not on cloud.

12:21

S… Speaker 2 ((Audio) Audit Recording )

It is an on -premise customer.

12:23

S… Speaker 2 ((Audio) Audit Recording )

So all the data rests with them only.

12:26

S… Speaker 2 ((Audio) Audit Recording )

We take the connection through a VPN.

12:28

S… Speaker 2 ((Audio) Audit Recording )

So they are the custodian of their data.

12:32

S… Speaker 5 ((Audio) Audit Recording )

Yes,

12:33

S… Speaker 5 ((Audio) Audit Recording )

correct Sima.

12:34

S… Speaker 3 ((Audio) Audit Recording )

Through

12:39

S… Speaker 5 ((Audio) Audit Recording )

the VPN connection only they take the remote servers from your end.

12:43

S… Speaker 3 ((Audio) Audit Recording )

Okay,

12:45

S… Speaker 5 ((Audio) Audit Recording )

okay. VPN also

12:50

S… Speaker 5 ((Audio) Audit Recording )

managed by your end only actually.

13:05

S… Speaker 1 ((Audio) Audit Recording )

Do you perform periodic or quarterly access reviews

13:09

S… Speaker 1 ((Audio) Audit Recording )

of accounts that can reach bank system or data and

13:13

S… Speaker 1 ((Audio) Audit Recording )

retain the evidence?

13:14

S… Speaker 5 ((Audio) Audit Recording )

So we actually

13:18

S… Speaker 5 ((Audio) Audit Recording )

we validated the user reconciliation report only.

13:21

S… Speaker 5 ((Audio) Audit Recording )

HR will send what

13:25

S… Speaker 5 ((Audio) Audit Recording )

are the things like accounts need to be disabled,

13:28

S… Speaker 5 ((Audio) Audit Recording )

enabled.

13:29

S… Speaker 5 ((Audio) Audit Recording )

So that things need to be validated from our end.

13:31

S… Speaker 5 ((Audio) Audit Recording )

So the like the monthly basis we consider and validated the reconciliation

13:35

S… Speaker 5 ((Audio) Audit Recording )

report.

13:53

S… Speaker 1 ((Audio) Audit Recording )

And how is the remote access of the bank environment control,

13:57

S… Speaker 1 ((Audio) Audit Recording )

like least privileged or individually

14:01

S… Speaker 1 ((Audio) Audit Recording )

attributed?

14:02

S… Speaker 5 ((Audio) Audit Recording )

Based on

14:09

S… Speaker 5 ((Audio) Audit Recording )

from your end only actually.

14:10

S… Speaker 5 ((Audio) Audit Recording )

Only the connectivity,

14:11

S… Speaker 5 ((Audio) Audit Recording )

only the VPN connected only.

14:14

S… Speaker 5 ((Audio) Audit Recording )

So the VPN credence are also given by your side only.

14:16

S… Speaker 5 ((Audio) Audit Recording )

I think there are two to three users only.

14:20

S… Speaker 5 ((Audio) Audit Recording )

Through the PAM actually,

14:21

S… Speaker 5 ((Audio) Audit Recording )

from your side to the PAM,

14:23

S… Speaker 5 ((Audio) Audit Recording )

the privileged access management from your side.

14:24

S… Speaker 5 ((Audio) Audit Recording )

So taking the remote decision only,

14:26

S… Speaker 5 ((Audio) Audit Recording )

not from our end.

14:27

S… Speaker 4 ((Audio) Audit Recording )

your

14:38

S… Speaker 1 ((Audio) Audit Recording )

I couldn't hear the last line, please can you repeat?

14:43

S… Speaker 4 ((Audio) Audit Recording )

Actually, it is on on-frame server site.

14:46

S… Speaker 4 ((Audio) Audit Recording )

So, servers, demo types, everything will be provided by the internet team only.

14:49

S… Speaker 4 ((Audio) Audit Recording )

Okay.

14:52

S… Speaker 3 ((Audio) Audit Recording )

Okay.

14:55

S… Speaker 3 ((Audio) Audit Recording )

Okay.

15:14

S… Speaker 1 ((Audio) Audit Recording )

Does your security incident process like does

15:19

S… Speaker 1 ((Audio) Audit Recording )

it notify the bank of incident or breaches within

15:23

S… Speaker 1 ((Audio) Audit Recording )

an agreed time frame or does it support

15:27

S… Speaker 1 ((Audio) Audit Recording )

RBI plus CRT in like 6 hours reporting?

16:04

S… Speaker 1 ((Audio) Audit Recording )

okay but in case what if it happens then what are the the measures that

16:08

S… Speaker 3 ((Audio) Audit Recording )

has taken yeah we

16:17

S… Speaker 5 ((Audio) Audit Recording )

will send the notification what are the actions means like mentioned

16:22

S… Speaker 5 ((Audio) Audit Recording )

through the agreement only agreement basis only okay

16:39

S… Speaker 1 ((Audio) Audit Recording )

Can you just please describe about the change

16:43

S… Speaker 1 ((Audio) Audit Recording )

management for Adrenaline HSMS that is like

16:47

S… Speaker 1 ((Audio) Audit Recording )

this is HR software only like the tested or approved or virgin control released

16:52

S… Speaker 1 ((Audio) Audit Recording )

like with the release note and rollback before the bank applies them.

16:56

S… Speaker 3 ((Audio) Audit Recording )

Talking

17:04

S… Speaker 5 ((Audio) Audit Recording )

about the patch management or what Ekra?

17:06

S… Speaker 4 ((Audio) Audit Recording )

Yes.

17:08

S… Speaker 3 ((Audio) Audit Recording )

One minute

17:20

S… Speaker 5 ((Audio) Audit Recording )

Ekra. Yes.

17:21

S… Speaker 3 ((Audio) Audit Recording )

Hello

17:42

S… Speaker 3 ((Audio) Audit Recording )

Sima.

17:42

S… Speaker 3 ((Audio) Audit Recording )

Sima.

17:47

S… Speaker 5 ((Audio) Audit Recording )

Hello, Seema.

17:48

S… Speaker 2 ((Audio) Audit Recording )

Yes, Seema.

17:49

S… Speaker 2 ((Audio) Audit Recording )

Yes, I can hear you.

17:50

S… Speaker 5 ((Audio) Audit Recording )

Seema Nishandh here,

17:52

S… Speaker 5 ((Audio) Audit Recording )

actually. Yes,

17:53

S… Speaker 5 ((Audio) Audit Recording )

so this patch management need to discuss

17:57

S… Speaker 5 ((Audio) Audit Recording )

with the cloud team only,

17:58

S… Speaker 5 ((Audio) Audit Recording )

actually, like the cloud only applies all the patches.

18:05

S… Speaker 2 ((Audio) Audit Recording )

A lot of your questions might not be relevant.

18:08

S… Speaker 2 ((Audio) Audit Recording )

Why?

18:08

S… Speaker 2 ((Audio) Audit Recording )

Because it is an on -premise customer.

18:10

S… Speaker 2 ((Audio) Audit Recording )

Like I told you,

18:11

S… Speaker 2 ((Audio) Audit Recording )

a lot of data,

18:12

S… Speaker 2 ((Audio) Audit Recording )

a lot of security in this bank is only the custodian for it.

18:16

S… Speaker 2 ((Audio) Audit Recording )

The questions that you are asking about

18:20

S… Speaker 2 ((Audio) Audit Recording )

patch management and releases,

18:22

S… Speaker 2 ((Audio) Audit Recording )

it applies to the...

18:24

S… Speaker 2 ((Audio) Audit Recording )

cloud this thing for patch also for our for patch updation

18:28

S… Speaker 2 ((Audio) Audit Recording )

also we need to take a connection from in the same bank to VPN once

18:33

S… Speaker 2 ((Audio) Audit Recording )

they give the connection then only we can update the patch is that correct Nishan

18:37

S… Speaker 5 ((Audio) Audit Recording )

yes correct without actually without in the same support we cannot yeah absolutely

18:42

S… Speaker 2 ((Audio) Audit Recording )

so for everything we are dependent on in the same time

18:50

S… Speaker 2 ((Audio) Audit Recording )

okay so we so we don't do anything by ourselves you know it is

18:54

S… Speaker 2 ((Audio) Audit Recording )

it is only where the innocent bank it team is involved in each and every activity

18:58

S… Speaker 2 ((Audio) Audit Recording )

since they provide the connection okay

19:03

S… Speaker 3 ((Audio) Audit Recording )

um just

19:08

S… Speaker 3 ((Audio) Audit Recording )

give

19:20

S… Speaker 3 ((Audio) Audit Recording )

me a minute um yeah um

19:35

S… Speaker 1 ((Audio) Audit Recording )

just wanted to ask um do you regularly like um

19:39

S… Speaker 1 ((Audio) Audit Recording )

track your sla performance and provide reports

19:43

S… Speaker 1 ((Audio) Audit Recording )

to the bank you mean

19:47

S… Speaker 4 ((Audio) Audit Recording )

support tickets that is uh is in the product right yeah

19:52

S… Speaker 7 ((Audio) Audit Recording )

there's a lay performance yeah this is that's actually there yeah

19:56

S… Speaker 4 ((Audio) Audit Recording )

it's actually uh we are since we are from the id team

20:00

S… Speaker 4 ((Audio) Audit Recording )

not the correct person to tell this answer so it's managed by your internal support

20:04

S… Speaker 5 ((Audio) Audit Recording )

team support team but actually the sle is the followed only okay um

20:09

S… Speaker 5 ((Audio) Audit Recording )

once the ticket is raised like the critical medium high so everything

20:13

S… Speaker 5 ((Audio) Audit Recording )

is having the sle okay do

20:18

S… Speaker 3 ((Audio) Audit Recording )

you

20:24

S… Speaker 1 ((Audio) Audit Recording )

allow um and support the bank and the rpi to conduct

20:28

S… Speaker 1 ((Audio) Audit Recording )

audit or inspection inspections including audit of subcontracts

20:33

S… Speaker 1 ((Audio) Audit Recording )

with reasonable notice

20:39

S… Speaker 4 ((Audio) Audit Recording )

there is no subcontracting involved so this

20:43

S… Speaker 4 ((Audio) Audit Recording )

must be confirmed by our internal legal team only since this comes

20:48

S… Speaker 5 ((Audio) Audit Recording )

under the legal this control area comes

20:52

S… Speaker 5 ((Audio) Audit Recording )

under the legal only yeah that's

20:56

S… Speaker 2 ((Audio) Audit Recording )

correct no subcontracting is involved in our case we

21:02

S… Speaker 8 ((Audio) Audit Recording )

don't okay

21:13

S… Speaker 1 ((Audio) Audit Recording )

Do you comply with all applicable laws like RBI requirements

21:17

S… Speaker 1 ((Audio) Audit Recording )

and data protection regulations?

21:19

S… Speaker 1 ((Audio) Audit Recording )

Are there any unresolved legal or regulatory

21:23

S… Speaker 1 ((Audio) Audit Recording )

issues that could affect your service?

21:44

S… Speaker 2 ((Audio) Audit Recording )

SOC 2,

21:44

S… Speaker 2 ((Audio) Audit Recording )

type 1, type 2 reports.

21:46

S… Speaker 2 ((Audio) Audit Recording )

Are you referring to that,

21:48

S… Speaker 2 ((Audio) Audit Recording )

Ekta?

21:48

S… Speaker 2 ((Audio) Audit Recording )

Are you referring to the data protection?

21:50

S… Speaker 1 ((Audio) Audit Recording )

Data security,

21:53

S… Speaker 2 ((Audio) Audit Recording )

yes.

21:53

S… Speaker 2 ((Audio) Audit Recording )

Correct.

21:55

S… Speaker 2 ((Audio) Audit Recording )

So I think everything is in place,

21:57

S… Speaker 2 ((Audio) Audit Recording )

Siva. We are absolutely DPDPA SOC 2,

21:59

S… Speaker 2 ((Audio) Audit Recording )

type 1,

22:00

S… Speaker 2 ((Audio) Audit Recording )

type 2 compliant.

22:01

S… Speaker 3 ((Audio) Audit Recording )

What,

22:04

S… Speaker 2 ((Audio) Audit Recording )

Siva? I'm saying we are absolutely DPDPA SOC

22:09

S… Speaker 2 ((Audio) Audit Recording )

2, type 1, type 2 compliant,

22:11

S… Speaker 2 ((Audio) Audit Recording )

right?

22:11

S… Speaker 5 ((Audio) Audit Recording )

Yes,

22:12

S… Speaker 5 ((Audio) Audit Recording )

correct, yeah.

22:12

S… Speaker 2 ((Audio) Audit Recording )

Yeah,

22:13

S… Speaker 2 ((Audio) Audit Recording )

so that is what she was asking.

22:16

S… Speaker 2 ((Audio) Audit Recording )

So we are absolutely compliant Ekta.

22:18

S… Speaker 2 ((Audio) Audit Recording )

If you want, we can share the soft reports with you also.

22:21

S… Speaker 5 ((Audio) Audit Recording )

Yes, soft and type will type the report also.

22:24

S… Speaker 2 ((Audio) Audit Recording )

Yeah,

22:24

S… Speaker 2 ((Audio) Audit Recording )

though we have already shared it with the Indescent Bank IT

22:28

S… Speaker 2 ((Audio) Audit Recording )

team.

22:29

S… Speaker 2 ((Audio) Audit Recording )

But if you want,

22:30

S… Speaker 2 ((Audio) Audit Recording )

we can share it with you also.

22:31

S… Speaker 1 ((Audio) Audit Recording )

Yes,

22:33

S… Speaker 1 ((Audio) Audit Recording )

sure.

22:33

S… Speaker 1 ((Audio) Audit Recording )

As Adbiz mentioned earlier,

22:35

S… Speaker 1 ((Audio) Audit Recording )

like the document which you are going to send,

22:37

S… Speaker 1 ((Audio) Audit Recording )

please share it on mail so that it's easy to refer other than showing it to us on call.

22:41

S… Speaker 3 ((Audio) Audit Recording )

Yeah,

22:43

S… Speaker 2 ((Audio) Audit Recording )

yeah, that's okay.

22:44

S… Speaker 2 ((Audio) Audit Recording )

So, I think we will also have to share the SOC reports with them,

22:48

S… Speaker 2 ((Audio) Audit Recording )

Siva.

22:48

S… Speaker 2 ((Audio) Audit Recording )

Yes,

22:50

S… Speaker 4 ((Audio) Audit Recording )

you can give the trust and the URL so that they can download

22:54

S… Speaker 4 ((Audio) Audit Recording )

and view the reports.

22:54

S… Speaker 4 ((Audio) Audit Recording )

Trust and the URL is there.

22:57

S… Speaker 2 ((Audio) Audit Recording )

Okay,

23:00

S… Speaker 2 ((Audio) Audit Recording )

fine, fine.

23:00

S… Speaker 2 ((Audio) Audit Recording )

I will share the reports with you,

23:03

S… Speaker 2 ((Audio) Audit Recording )

no worries,

23:04

S… Speaker 2 ((Audio) Audit Recording )

Ekpa.

23:04

S… Speaker 1 ((Audio) Audit Recording )

Moving forward,

23:09

S… Speaker 1 ((Audio) Audit Recording )

I would just like to ask you,

23:21

S… Speaker 1 ((Audio) Audit Recording )

Is bank data accessed only when necessary or

23:25

S… Speaker 1 ((Audio) Audit Recording )

encrypted during transfer stored only in India and not retained

23:29

S… Speaker 1 ((Audio) Audit Recording )

after the contract ends?

23:31

S… Speaker 1 ((Audio) Audit Recording )

Please can you specify what bank data you access or

23:35

S… Speaker 7 ((Audio) Audit Recording )

store? Okay,

23:37

S… Speaker 4 ((Audio) Audit Recording )

so the bank data is within the on -premise only,

23:40

S… Speaker 3 ((Audio) Audit Recording )

right? Yeah.

23:41

S… Speaker 5 ((Audio) Audit Recording )

So there is no,

23:42

S… Speaker 5 ((Audio) Audit Recording )

yeah, there is no possible to like copy and paste anything actually.

23:47

S… Speaker 5 ((Audio) Audit Recording )

So already production has been done from your end.

23:50

S… Speaker 5 ((Audio) Audit Recording )

Only through the PAM connectivity only actually they are taking the service.

23:53

S… Speaker 5 ((Audio) Audit Recording )

So no chances to taking the data from your end.

23:56

S… Speaker 4 ((Audio) Audit Recording )

And the data location also is at the...

23:59

S… Speaker 5 ((Audio) Audit Recording )

On -prem only, in the same site only.

24:00

S… Speaker 5 ((Audio) Audit Recording )

So there is no possible.

24:01

S… Speaker 3 ((Audio) Audit Recording )

I

24:19

S… Speaker 1 ((Audio) Audit Recording )

just wanted to ask,

24:20

S… Speaker 1 ((Audio) Audit Recording )

as the data is stored on -premise,

24:22

S… Speaker 1 ((Audio) Audit Recording )

like how is the backup done,

24:26

S… Speaker 1 ((Audio) Audit Recording )

like backup personnel for key roles?

24:27

S… Speaker 3 ((Audio) Audit Recording )

If

24:32

S… Speaker 4 ((Audio) Audit Recording )

it's on -prem means it will not come under our scope,

24:34

S… Speaker 4 ((Audio) Audit Recording )

right? The backup part.

24:41

S… Speaker 4 ((Audio) Audit Recording )

If the server is managed by us,

24:44

S… Speaker 4 ((Audio) Audit Recording )

we will do backup,

24:45

S… Speaker 5 ((Audio) Audit Recording )

we will do direct everything.

24:47

S… Speaker 5 ((Audio) Audit Recording )

Server is not managed by us means not able to do anything.

25:00

S… Speaker 2 ((Audio) Audit Recording )

for their data backup and everything we have no role to play there okay

25:05

S… Speaker 1 ((Audio) Audit Recording )

got it and in case when like when the contract ends um

25:10

S… Speaker 1 ((Audio) Audit Recording )

like will you help with the transition

25:14

S… Speaker 1 ((Audio) Audit Recording )

or return like uh securely delete all the

25:18

S… Speaker 1 ((Audio) Audit Recording )

bank data and like as i as i know like there is no bank data as

25:22

S… Speaker 1 ((Audio) Audit Recording )

you all have but once the contract ends um

25:27

S… Speaker 1 ((Audio) Audit Recording )

Like, do you also have a documented exit plan for major engagements

25:32

S… Speaker 1 ((Audio) Audit Recording )

like this?

25:33

S… Speaker 3 ((Audio) Audit Recording )

So,

25:36

S… Speaker 2 ((Audio) Audit Recording )

Iktasim,

25:43

S… Speaker 2 ((Audio) Audit Recording )

like I told you,

25:44

S… Speaker 2 ((Audio) Audit Recording )

the data is stored there only.

25:46

S… Speaker 2 ((Audio) Audit Recording )

Whatever help is required from us,

25:48

S… Speaker 2 ((Audio) Audit Recording )

okay?

25:49

S… Speaker 2 ((Audio) Audit Recording )

So,

25:49

S… Speaker 2 ((Audio) Audit Recording )

we will render all that help.

25:51

S… Speaker 2 ((Audio) Audit Recording )

But again, to reiterate the data,

25:53

S… Speaker 2 ((Audio) Audit Recording )

everything is there.

25:54

S… Speaker 2 ((Audio) Audit Recording )

So, there is nothing like we can give the data because we don't have anything.

25:58

S… Speaker 2 ((Audio) Audit Recording )

But if there is any other help that they need,

26:00

S… Speaker 2 ((Audio) Audit Recording )

so definitely we will kind of revert with that help.

26:03

S… Speaker 3 ((Audio) Audit Recording )

Okay.

26:11

S… Speaker 1 ((Audio) Audit Recording )

for something like a secure development such as code

26:15

S… Speaker 1 ((Audio) Audit Recording )

review or reports or malware malware screening and

26:19

S… Speaker 1 ((Audio) Audit Recording )

like our development coding development and production support

26:24

S… Speaker 1 ((Audio) Audit Recording )

access handled by separate people.

26:26

S… Speaker 4 ((Audio) Audit Recording )

OK,

26:31

S… Speaker 1 ((Audio) Audit Recording )

OK, one minute.

26:32

S… Speaker 1 ((Audio) Audit Recording )

Am I audible now?

26:33

S… Speaker 5 ((Audio) Audit Recording )

Yes,

26:34

S… Speaker 3 ((Audio) Audit Recording )

please.

26:34

S… Speaker 3 ((Audio) Audit Recording )

Yeah,

26:35

S… Speaker 1 ((Audio) Audit Recording )

give me a minute,

26:37

S… Speaker 1 ((Audio) Audit Recording )

please.

26:49

S… Speaker 5 ((Audio) Audit Recording )

no i think it's not audible currently hello

26:56

S… Speaker 7 ((Audio) Audit Recording )

yes now it's clear yes um

27:00

S… Speaker 1 ((Audio) Audit Recording )

can you like provide evidence of secure development such

27:04

S… Speaker 1 ((Audio) Audit Recording )

as code review reports and malware screening and like

27:08

S… Speaker 1 ((Audio) Audit Recording )

our coding development and production support access handled by different

27:13

S… Speaker 5 ((Audio) Audit Recording )

people so talking about which control area this

27:17

S… Speaker 5 ((Audio) Audit Recording )

one like the application security or which control area

27:23

S… Speaker 3 ((Audio) Audit Recording )

This is

27:50

S… Speaker 1 ((Audio) Audit Recording )

about application security.

27:52

S… Speaker 5 ((Audio) Audit Recording )

This

28:13

S… Speaker 5 ((Audio) Audit Recording )

control

28:17

S… Speaker 3 ((Audio) Audit Recording )

area

28:42

S… Speaker 1 ((Audio) Audit Recording )

is about application security.

28:44

S… Speaker 1 ((Audio) Audit Recording )

Are bulk data exports like reports

28:48

S… Speaker 1 ((Audio) Audit Recording )

downloaded of personal data restricted or

28:52

S… Speaker 1 ((Audio) Audit Recording )

logged or removed from support rules?

28:57

S… Speaker 5 ((Audio) Audit Recording )

We cannot download it and export from server to local machine.

29:01

S… Speaker 5 ((Audio) Audit Recording )

We cannot able to do that.

29:03

S… Speaker 3 ((Audio) Audit Recording )

Okay.

29:06

S… Speaker 1 ((Audio) Audit Recording )

From service

29:10

S… Speaker 1 ((Audio) Audit Recording )

provider governance control area.

29:12

S… Speaker 1 ((Audio) Audit Recording )

And like what are the defined priority

29:16

S… Speaker 1 ((Audio) Audit Recording )

or responses and solution times you actually attend

29:20

S… Speaker 1 ((Audio) Audit Recording )

over the past,

29:21

S… Speaker 1 ((Audio) Audit Recording )

over the last 12 months and any penalty events?

29:28

S… Speaker 5 ((Audio) Audit Recording )

Sima, could you please answer this call because actually talking about the

29:32

S… Speaker 5 ((Audio) Audit Recording )

like the response solution time actually,

29:34

S… Speaker 5 ((Audio) Audit Recording )

I think the support team is the correct person.

29:36

S… Speaker 2 ((Audio) Audit Recording )

Ekta,

29:38

S… Speaker 2 ((Audio) Audit Recording )

can you please repeat your question?

29:39

S… Speaker 3 ((Audio) Audit Recording )

Yeah,

29:41

S… Speaker 5 ((Audio) Audit Recording )

sure.

29:41

S… Speaker 5 ((Audio) Audit Recording )

I think she is asking

29:45

S… Speaker 5 ((Audio) Audit Recording )

like the response resolution time by the support call category.

29:48

S… Speaker 2 ((Audio) Audit Recording )

So what exactly are

29:52

S… Speaker 2 ((Audio) Audit Recording )

you asking Ekta?

29:53

S… Speaker 2 ((Audio) Audit Recording )

I'm sorry I could not get your question.

29:59

S… Speaker 5 ((Audio) Audit Recording )

Ektal, your voice is like not audible.

30:00

S… Speaker 7 ((Audio) Audit Recording )

Actually,

30:02

S… Speaker 4 ((Audio) Audit Recording )

they are asking about the SLA for the tickets.

30:04

S… Speaker 5 ((Audio) Audit Recording )

P1,

30:05

S… Speaker 5 ((Audio) Audit Recording )

P2, P3,

30:06

S… Speaker 5 ((Audio) Audit Recording )

P4 tickets.

30:07

S… Speaker 2 ((Audio) Audit Recording )

Yeah, so,

30:07

S… Speaker 2 ((Audio) Audit Recording )

like we mentioned

30:12

S… Speaker 2 ((Audio) Audit Recording )

earlier, we have an SLA,

30:14

S… Speaker 2 ((Audio) Audit Recording )

okay,

30:14

S… Speaker 2 ((Audio) Audit Recording )

for each category of tickets,

30:16

S… Speaker 2 ((Audio) Audit Recording )

which is there in place.

30:17

S… Speaker 2 ((Audio) Audit Recording )

And we try our best to abide by that.

30:20

S… Speaker 3 ((Audio) Audit Recording )

Okay.

30:24

S… Speaker 1 ((Audio) Audit Recording )

So for example,

30:25

S… Speaker 1 ((Audio) Audit Recording )

if it's a high priority ticket,

30:27

S… Speaker 1 ((Audio) Audit Recording )

so how many days do you all have to resolve a high priority ticket?

30:31

S… Speaker 2 ((Audio) Audit Recording )

I

30:41

S… Speaker 2 ((Audio) Audit Recording )

will have to check that.

30:42

S… Speaker 2 ((Audio) Audit Recording )

I can come back to you with the SLAs of different tickets if

30:46

S… Speaker 2 ((Audio) Audit Recording )

you want.

30:46

S… Speaker 3 ((Audio) Audit Recording )

Okay,

30:47

S… Speaker 1 ((Audio) Audit Recording )

sure, please.

30:48

S… Speaker 3 ((Audio) Audit Recording )

And for the

30:54

S… Speaker 1 ((Audio) Audit Recording )

employees who work at...

30:56

S… Speaker 1 ((Audio) Audit Recording )

Yeah, sorry.

30:56

S… Speaker 2 ((Audio) Audit Recording )

Yeah,

30:57

S… Speaker 1 ((Audio) Audit Recording )

yeah, please go ahead.

30:58

S… Speaker 2 ((Audio) Audit Recording )

Yeah, yeah, please carry on.

31:00

S… Speaker 8 ((Audio) Audit Recording )

Okay.

31:01

S… Speaker 1 ((Audio) Audit Recording )

And if our employees who work at the bank premises,

31:04

S… Speaker 1 ((Audio) Audit Recording )

our background check,

31:06

S… Speaker 1 ((Audio) Audit Recording )

NDAs and access control followed,

31:08

S… Speaker 1 ((Audio) Audit Recording )

like is visitor access recorded?

31:11

S… Speaker 2 ((Audio) Audit Recording )

I see

31:20

S… Speaker 2 ((Audio) Audit Recording )

that access is not recorded in the HRMS system because it is not a

31:24

S… Speaker 2 ((Audio) Audit Recording )

part of HRMS.

31:25

S… Speaker 2 ((Audio) Audit Recording )

It will be the part of bank's software.

31:27

S… Speaker 3 ((Audio) Audit Recording )

Okay.

31:32

S… Speaker 2 ((Audio) Audit Recording )

Visitor access recording is not a part of the HRMS.

31:36

S… Speaker 3 ((Audio) Audit Recording )

Okay.

31:48

S… Speaker 7 ((Audio) Audit Recording )

sorry and what about the employees

31:53

S… Speaker 1 ((Audio) Audit Recording )

who work at the bank premises are their background checks done

31:57

S… Speaker 5 ((Audio) Audit Recording )

would you please answer this their

32:01

S… Speaker 2 ((Audio) Audit Recording )

background check will be done by the bank only currently

32:06

S… Speaker 2 ((Audio) Audit Recording )

they are not getting it done

32:10

S… Speaker 2 ((Audio) Audit Recording )

through our system they are not doing it through our hrms system they

32:17

S… Speaker 2 ((Audio) Audit Recording )

would be having an external agency for the bgbs

32:29

S… Speaker 8 ((Audio) Audit Recording )

Okay, fine.

32:30

S… Speaker 8 ((Audio) Audit Recording )

Got it.

32:31

S… Speaker 1 ((Audio) Audit Recording )

And one last question is,

32:33

S… Speaker 1 ((Audio) Audit Recording )

do you currently have ISO 27001

32:38

S… Speaker 1 ((Audio) Audit Recording )

like or SOC 2 type 2 certification covering the services

32:42

S… Speaker 1 ((Audio) Audit Recording )

provided to the bank?

32:45

S… Speaker 5 ((Audio) Audit Recording )

Both are completely directly.

32:48

S… Speaker 5 ((Audio) Audit Recording )

ISO is also covered and the SOC also covered.

32:51

S… Speaker 1 ((Audio) Audit Recording )

Please can you share the latest certificate or the report

32:55

S… Speaker 1 ((Audio) Audit Recording )

on mail?

32:56

S… Speaker 5 ((Audio) Audit Recording )

Yes, yes,

32:57

S… Speaker 2 ((Audio) Audit Recording )

please. We will share that.

33:01

S… Speaker 1 ((Audio) Audit Recording )

Okay, all the questions are done from my side.

33:03

S… Speaker 1 ((Audio) Audit Recording )

Anything from you,

33:05

S… Speaker 1 ((Audio) Audit Recording )

Arpit?

33:05

S… Speaker 5 ((Audio) Audit Recording )

Just wanted to mention

33:10

S… Speaker 5 ((Audio) Audit Recording )

that, can you please share all three of

33:14

S… Speaker 5 ((Audio) Audit Recording )

you, can you share your numbers and email IDs in the chat?

33:18

S… Speaker 5 ((Audio) Audit Recording )

So,

33:20

S… Speaker 5 ((Audio) Audit Recording )

what I'll do,

33:23

S… Speaker 2 ((Audio) Audit Recording )

Arpit, is when I'm going to send you this mail,

33:26

S… Speaker 2 ((Audio) Audit Recording )

I'm going to share their email IDs,

33:28

S… Speaker 5 ((Audio) Audit Recording )

okay? And phone numbers,

33:30

S… Speaker 2 ((Audio) Audit Recording )

please.

33:31

S… Speaker 2 ((Audio) Audit Recording )

Okay,

33:33

S… Speaker 2 ((Audio) Audit Recording )

alright.

33:34

S… Speaker 3 ((Audio) Audit Recording )

Yeah.

33:38

S… Speaker 2 ((Audio) Audit Recording )

That's it.

33:39

S… Speaker 6 ((Audio) Audit Recording )

That's it from my side.

33:43

S… Speaker 1 ((Audio) Audit Recording )

Thank you so much, Seema.

33:45

S… Speaker 1 ((Audio) Audit Recording )

Thank you so much, Siva Kumar.

33:46

S… Speaker 2 ((Audio) Audit Recording )

Thanks Sikta, thanks Siva, thanks Nishan, thanks Arfad

33:49

S… Speaker 5 ((Audio) Audit Recording )

Yeah, thanks Siva, thanks Ekta

33:50

S… Speaker 2 ((Audio) Audit Recording )

Thanks, bye

33:51

S… Speaker 1 ((Audio) Audit Recording )

Thanks, bye

34:01

S… Speaker 1 ((Audio) Audit Recording )

Bro, what was this?

34:07

S… Speaker 8 ((Audio) Audit Recording )

I didn't know what the heck, I won with the game

(Audio) Audit Recording

Sammanfattning

Fråga AI om detta Transcript