(Audio) Audit Recording

34:11 8 Locutores 16 Capitolium 469 Segmenta

Textus interretialis Cercare omnes

Locutores

Capitolium

2:46

Capitolium 1: I don't have to worry about it. 3s · Speaker 1

I don't have to worry about it. I don't have to worry about it.
5:37

Capitolium 2: Hi. Hi. Hi Kunal. 69s · Speaker 2

Hi. Hi. Hi Kunal. Hi. Hi everyone. Hi Arpeth. Hi Ekta. Hello. Hi Simu. So Siva, somebody is joining from our IT team or is it only you? Hi Sima. Nishant here. Both are in the same room. Oh great, great. Hi Nishant. Kunal, Sivakumar and Nish…
6:46

Capitolium 3: Yes, sure. 231s · Speaker 7

Yes, sure. So I would like to ask you actually like to understand how do you maintain or approve? uh or document information security policy which covers like the personal and the system which is used to deliver adrenaline hsms hr like at t…
10:37

Capitolium 4: me a second please okay Next is, have all the personals on the bank engagement signed individual NDAs and completed the Periodical Security Awareness Training? 99s · Speaker 8

me a second please okay Next is, have all the personals on the bank engagement signed individual NDAs and completed the Periodical Security Awareness Training? security awareness training and the infosec policy training everything is once a…
12:18

Capitolium 5: So Ekta, Indusim bank is not on cloud. 130s · Speaker 2

So Ekta, Indusim bank is not on cloud. It is an on -premise customer. So all the data rests with them only. We take the connection through a VPN. So they are the custodian of their data. Yes, correct Sima. Through the VPN connection only th…
14:27

Capitolium 6: your I couldn't hear the last line, please can you repeat? 109s · Speaker 4

your I couldn't hear the last line, please can you repeat? Actually, it is on on-frame server site. So, servers, demo types, everything will be provided by the internet team only. Okay. Okay. Okay. Does your security incident process like d…
16:17

Capitolium 7: will send the notification what are the actions means like mentioned through the agreement only agreement basis only okay Can you just please describe about the change management for Adrenaline HSMS that is like this is HR software only like the tested or approved or virgin control released like with the release note and rollback before the bank applies them. 91s · Speaker 5

will send the notification what are the actions means like mentioned through the agreement only agreement basis only okay Can you just please describe about the change management for Adrenaline HSMS that is like this is HR software only lik…
17:48

Capitolium 8: Yes, Seema. 74s · Speaker 2

Yes, Seema. Yes, I can hear you. Seema Nishandh here, actually. Yes, so this patch management need to discuss with the cloud team only, actually, like the cloud only applies all the patches. A lot of your questions might not be relevant. Wh…
19:03

Capitolium 9: um just give me a minute um yeah um just wanted to ask um do you regularly like um track your sla performance and provid… 60s · Speaker 3

um just give me a minute um yeah um just wanted to ask um do you regularly like um track your sla performance and provide reports to the bank you mean support tickets that is uh is in the product right yeah there's a lay performance yeah th…
20:04

Capitolium 10: team support team but actually the sle is the followed only okay um once the ticket is raised like the critical medium high so everything is having the sle okay do you allow um and support the bank and the rpi to conduct audit or inspection inspections including audit of subcontracts with reasonable notice there is no subcontracting involved so this must be confirmed by our internal legal team only since this comes under the legal this control area comes under the legal only yeah that's correct no subcontracting is involved in our case we don't okay Do you comply with all applicable laws like RBI requirements and data protection regulations? 211s · Speaker 5

team support team but actually the sle is the followed only okay um once the ticket is raised like the critical medium high so everything is having the sle okay do you allow um and support the bank and the rpi to conduct audit or inspection…
23:35

Capitolium 11: store? Okay, so the bank data is within the on -premise only, right? 76s · Speaker 7

store? Okay, so the bank data is within the on -premise only, right? Yeah. So there is no, yeah, there is no possible to like copy and paste anything actually. So already production has been done from your end. Only through the PAM connecti…
25:00

Capitolium 12: for their data backup and everything we have no role to play there okay got it and in case when like when the contract ends um like will you help with the transition or return like uh securely delete all the bank data and like as i as i know like there is no bank data as you all have but once the contract ends um Like, do you also have a documented exit plan for major engagements like this? 86s · Speaker 2

for their data backup and everything we have no role to play there okay got it and in case when like when the contract ends um like will you help with the transition or return like uh securely delete all the bank data and like as i as i kno…
26:26

Capitolium 13: OK, OK, one minute. 190s · Speaker 4

OK, OK, one minute. Am I audible now? Yes, please. Yeah, give me a minute, please. no i think it's not audible currently hello yes now it's clear yes um can you like provide evidence of secure development such as code review reports and mal…
29:36

Capitolium 14: Ekta, can you please repeat your question? 83s · Speaker 2

Ekta, can you please repeat your question? Yeah, sure. I think she is asking like the response resolution time by the support call category. So what exactly are you asking Ekta? I'm sorry I could not get your question. Ektal, your voice is …
31:00

Capitolium 15: Okay. And if our employees who work at the bank premises, our background check, NDAs and access control followed, like is visitor access recorded? 159s · Speaker 8

Okay. And if our employees who work at the bank premises, our background check, NDAs and access control followed, like is visitor access recorded? I see that access is not recorded in the HRMS system because it is not a part of HRMS. It wil…
33:39

Capitolium 16: That's it from my side. 30s · Speaker 6

That's it from my side. Thank you so much, Seema. Thank you so much, Siva Kumar. Thanks Sikta, thanks Siva, thanks Nishan, thanks Arfad Yeah, thanks Siva, thanks Ekta Thanks, bye Thanks, bye Bro, what was this? I didn't know what the heck, …