Thursday, January 29, 2015

Are There Security Risks with SaaS Delivery of Core Banking Services?

BSunay Mruthyunjay, Chief Technology Officer - IDEALINVENT


(Image credit - Cloudvolution)

Are worries about the security of your bank’s data stopping you from considering SaaS delivery of core banking services? Do you feel it’s not worth the ‘risk’ even though the benefits, especially in regards to reduced cost and improved business agility are well proven? As CTO in a company that hosts ‘Banking Software as a Service’, it’s my job to consider and respond to all the perceived negatives of our B-SaaS™ offering and would ask you to consider the following points.

It’s human nature to avoid risk. In our decision making process, many of us consider different scenarios, evaluate risk versus rewards or benefits and then make a judgment call as to how much of risk is appropriate for a certain reward. So in the end, it boils down to balancing the risk and reward and this applies to any rational decision - be it our personal lives or matters related to business.

With this as the background, let’s try to analyse the number 1 perceived risk of a SaaS offering  - data security; This is of course the most significant risk that a bank gets exposed to with SaaS. Data flows through the internet, is stored in a location that is physically away from the bank and the bank cannot really control who gets access to its secure data.

To put this in perspective, let us take an example. Say you got some money; what would you normally do. Probably spend some and put the rest in your bank. It’s your money and you find it alright to leave it with a bank. The reason is, we know that it’s safe, probably also earns interest and most importantly, the bank knows how to safeguard my money better than I do (hopefully and in most cases!). The same money is available to you whenever you need it. You also trust the systems so much that you are fairly sure that your money cannot be withdrawn by someone else - thanks to the authentication mechanisms in place.

This ‘money’ security works - so what’s the big deal with data security?
Firstly, sensitive data of the clients, their personal identities and such others should be secured. Information related to products and pricing are equally sensitive. Last but not the least, the bank's strategic initiatives and goals, control measures and other operational procedures also need to be protected. If in the unfortunate case of a data breach, banks stand to lose a lot – most importantly credibility and that trust factor with their clients which in turn can lead to huge losses in business and revenues.

Thankfully, these fears need not deter a bank from ruling out SaaS. Technology today is well advanced to ensure mechanisms that secure data while being transferred. Complex authentication mechanisms and cryptographic techniques ensure data on the move is not easy to be hacked and deciphered. Data hosted on a public cloud is just as safe (if not safer) than that hosted on a private cloud or in-house on stack servers.

As far as data storage is concerned, a number of preventive measures can be implemented to avoid any data leakage. With a credible service provider, periodic security reviews or audits, third party assessment and certification, implementing ISO standards for managing information security are some of the easy means by which data can be secured in a SaaS scenario.

Having an information inventory with the appropriate risk measure associated with each item on the inventory list can help get a good grip on the information loss risk that a bank deals with from a SaaS point of view.

The other significant risk in a SaaS offering is that of integration. Typically systems that are on-premise have to exchange information between systems that are on SaaS. Apart from the usual complexities of integrating two systems, integration with a SaaS application poses additional challenges of dedicated bandwidth and security. Banks have to ensure that the SaaS application they choose has standardized ways of integrating that can co-exist with the other applications within the bank.

SaaS applications are getting smarter by the day. They allow a reasonable amount of customization to suit your needs without any intervention from the provider. The costs are extremely predictable and controllable. All the upgrades are automatically included and most importantly, the bank can focus on their core business with minimal diversion on IT systems.

Overall banks can reap significant benefits from a SaaS system without compromising on any security risks by acknowledging, assessing and effectively managing them, just as you do with any aspect of your life or business.

Sunay Mruthyunjay
Sunay brings over 17 years of experience developing IT products for the banking industry into IDEALINVENT. He cut his teeth as a product designer and developer before moving into product implementation and delivery management. Notable achievements include being a key member of the first ever Indian led complete system replacements in one of the largest corporate banks in Japan and has been instrumental in several project implementations of varying complexities in Western Europe including a Payments and Core implementation in a leading Swiss bank.

113 comments:

  1. Cloud backup systems are much more secure than backing up data on your own store server or hard drive. A cloud backup company is in the business of protecting data. It’s the only thing they do. Their server locations are much more secure, protected, and hacker-proof than your server or store computer.
    iDeals data room due diligence

    ReplyDelete
  2. Maharashtra Police Wireless HC ASI Recruitment 2016

    I like the valuable information you provide in your articles, Thanks for sharing....

    ReplyDelete
  3. This is a great inspiring article.Buzz Applications I am pretty much pleased with your good work. You put really very helpful information.

    ReplyDelete
  4. Thank you for taking the time to provide us with your valuable information. We strive to provide our candidates with excellent care and we take your comments to heart.As always, we appreciate your confidence and trust in us.


    VMware Training in Chennai

    ReplyDelete
  5. The article is very I am a regular reader of your blog. the blog is very interesting and will be much useful for us.
    Hadoop Training in chennai

    ReplyDelete
  6. Nice Blog. Useful Information.Thanks for sharing with us.
    Web Designing in Hyderabad

    ReplyDelete
  7. Excellent article and a truly amazing blog Visit for more info wp sms

    ReplyDelete
  8. Excellent article and a truly amazing blog Visit for more info SSIS training in chennai

    ReplyDelete
  9. Hi This is very useful and informative blog for all kinda people
    PHP Training in Chennai

    ReplyDelete
  10. This post is very useful and it's a worth read, Thanks for sharing this valuable information with us.
    IT Job Training in Chennai

    ReplyDelete
  11. Excellent post!!!. The strategy you have posted on this technology helped me to get into the next level and had lot of information in it.
    Hadoop Training in Chennai | Selenium Training in Chennai | Salesforce Training in Chennai |

    ReplyDelete
  12. The major advantage of pursuing course with the best institute for Selenium Training Bangalore is that, one would get their direct assistance in getting yourself a job in your preferred domain. The rest is up to the student, because it’s the student’s responsibility to perform well in the interview in getting the job. Selenium Training in Bangalore |
    Python Training in Bangalore |

    ReplyDelete
  13. Really cool post. It's truly extremely pleasant and valuable post.Thanks for offering this to us! it's my first visit.
    Data Entry Projects Outsourcing

    ReplyDelete
  14. This is an awesome post.Really very informative and creative contents. These concept is a good way to enhance the knowledge.I like it and help me to development very well.Thank you for this brief explanation and very nice information.Well, got a good knowledge.
    AngularJS Training Institute in Chennai
    AngularJS Cetification Training in Chennai
    AWS Training in Chennai
    AWS Devops Training in Chennai
    DevOps Certification in Chennai
    DevOPs Certification Training Institute in Chennai
    Best AngularJS Training in Chennai
    AngularJS Training in Chennai

    ReplyDelete
  15. Great Article… I love to read your articles because your writing style is too good, its is very very helpful for all of us and I never get bored while reading your article because, they are becomes a more and more interesting from the starting lines until the end.
    Devops training in velachry
    Devops training in OMR
    Deops training in annanagar
    Devops training in chennai
    Devops training in marathahalli
    Devops training in rajajinagar
    Devops training in BTM Layout




    ReplyDelete
  16. This comment has been removed by the author.

    ReplyDelete
  17. Great work. Quite a useful post, I learned some new points here.I wish you luck as you continue to follow that passion.

    Cloud Training
    Cloud Training in Chennai

    ReplyDelete
  18. It is amazing and wonderful to visit your site.Thanks for sharing this information,this is useful to me...
    python online training
    python training course in chennai
    python training in jayanagar

    ReplyDelete
  19. Wow, Nice blog. Thank you so much for the efforts of this blog. Visit for
    Web Designing Company in Delhi

    ReplyDelete
  20. Hello great information found here, Being IT person we should always in up to date. Current IT market has been looking for Automation in every platform. Why people want to make them update, I have been observing from past few days RPA is trending across the world. Update your career to RPA, Blue Prism, Automation Anywhere.

    ReplyDelete
  21. Computer Science Dissertation Writing Services https://www.wordsdoctorate.com/projects/computer-science-dissertation-writing-services/

    Chemistry Dissertation Writing Services https://www.wordsdoctorate.com/projects/chemistry-dissertation-writing-services/

    Social science Dissertation Writing Services https://www.wordsdoctorate.com/projects/social-science-dissertation-writing-services/

    Biotechnology Dissertation Writing Services https://www.wordsdoctorate.com/projects/biotech-dissertation-writing-services/

    Economics Dissertation Writing Services https://www.wordsdoctorate.com/projects/economics-dissertation-writing-services/

    Civil Engineering Dissertation Writing Services https://www.wordsdoctorate.com/projects/civil-engineering-dissertation-writing-services/

    Finance Dissertation Writing Services https://www.wordsdoctorate.com/projects/finance-dissertation-writing-services/

    ReplyDelete
  22. Thanks for such a great article here. I was searching for something like this for quite a long time and at last I’ve found it on your blog. It was definitely interesting for me to read about their market situation nowadays. Well written article Thank You for Sharing with Us pmp training fee | pmp certification course in chennai | best pmp training institute in chennai| | pmp training class in chennai \ pmp training fee

    ReplyDelete
  23. I wish to show thanks to you just for bailing me out of this particular trouble. As a result of checking through the net and meeting techniques that were not productive, I thought my life was done.
    iosh course in chennai

    ReplyDelete

  24. Hey, Wow all the posts are very informative for the people who visit this site. Good work! We also have a Website. Please feel free to visit our site. Thank you for sharing. AngularJS Training in Chennai | Best AngularJS Training Institute in Chennai |

    ReplyDelete
  25. Great Article… I love to read your articles because your writing style is too good, its is very very helpful for all of us and I never get bored while reading your article because, they are becomes a more and more interesting from the starting lines until the end. 
    microsoft azure training in bangalore
    rpa training in bangalore
    best rpa training in bangalore
    rpa online training

    ReplyDelete
  26. Such a Great Article!! I learned something new from your blog. Amazing stuff. I would like to follow your blog frequently. Keep Rocking!! Best rpa training in Chennai | RPA Training with Placement in Chennai

    ReplyDelete
  27. Resources like the one you mentioned here will be very useful to me ! I will post a link to this page on my blog. I am sure my visitors will find that very useful
    Best Devops online Training
    Online DevOps Certification Course - Gangboard

    ReplyDelete
  28. All the points you described so beautiful. Every time i read your i blog and i am so surprised that how you can write so well.
    Python Online certification training
    python Training institute in Chennai
    Python training institute in Bangalore

    ReplyDelete
  29. Very impressive thanks for sharing

    ReplyDelete
  30. Thank For Sharing Your Information The Information Shared Is Very Valuable Please Keep Updating Us Time Went On Just Reading The Article Python Online Course<\a> DataScience Online Course<\a> Hadoop Online Course<\a> AWSOnline Course<\a>

    ReplyDelete
  31. Thank For Sharing Your Information The Information Shared Is Very Valuable Please Keep Updating Us Time Went On Just Reading The Article Python Online Course

    ReplyDelete
  32. This comment has been removed by the author.

    ReplyDelete
  33. I enjoy what you guys are usually up too. This sort of clever work and coverage! Keep up the wonderful works guysl.Good going.
    oneplus service center in chennai
    oneplus service centre chennai
    oneplus service centre

    ReplyDelete
  34. we are the best led tv repairing course in delhi for more details click one of the phrase.


    led lcd repairing course
    lcd tv repairing course
    lcd tv repair training institute

    ReplyDelete
  35. Thank you for this Information.
    Check out the best coffee table nz

    ReplyDelete
  36. This comment has been removed by the author.

    ReplyDelete
  37. Visit for AWS training in Bangalore:- AWS training in Bangalore

    ReplyDelete
  38. Nice blog, thanks for sharing with us this interesting blog. Visit OGEN Infosystem for Website Designing and PPC Services in Delhi, India.
    PPC Service in Delhi

    ReplyDelete

  39. After looking over a few of the articles on your blog, I seriously like your technique of blogging. I saved it to my bookmark site list and will be checking back in the near future. Please check out my web site too and let me know what you think.
    Best travel agency in India

    ReplyDelete
  40. Really very happy to say, your post is very interesting to read. I never stop myself to say something about it. You’re doing a great job. Keep it up…

    Start your journey with RPA Training in Bangalore and get hands-on Experience with 100% Placement assistance from experts Trainers @Softgen Infotech Located in BTM Layout Bangalore. Expert Trainers with 8+ Years of experience, Free Demo Classes Conducted.

    ReplyDelete
  41. The article you have shared here very awesome. I really like and appreciated your work. I read deeply your article, the points you have mentioned in this article are useful
    Best travel agency in India

    ReplyDelete
  42. This comment has been removed by the author.

    ReplyDelete
  43. Great blog it its really informative and innovative keep us posted with new updates. It was really valuable. Thanks a lot.
    Best Lawyers in Delhi NCR
    Civil Lawyers in Delhi
    Best Family Lawyer in Delhi

    ReplyDelete
  44. Great Article. Thank you for sharing! Really an awesome post for every one...
    AWS Training in Bangalore

    ReplyDelete
  45. This is really too useful and have more ideas and keep sharing many techniques...you can explore the many exciting Job Opportunities on India Postal Recruitment 2020. Latest and also upcoming Notifications on India Post recruitment are updated in this page immediately...

    ReplyDelete
  46. Hi there! This is kind of off topic but I need some guidance from an established blog.
    Is it hard to set up your own blog? I’m not very techincal but I
    can figure things out pretty fast. I’m thinking about making my
    own but I’m not sure where to start. Do you have any
    points or suggestions?Thanks for posting it. I also would like to share with you about Managed Print Services

    ReplyDelete
    Replies
    1. It is amazing and wonderful to visit your site.Thanks for sharing this information,this is useful to me... Living Room Accessories

      Delete
  47. Thank you much more for gave a great post and definitely this post is usefulin my future. Please updating them...
    living room furniture

    ReplyDelete
  48. Very interesting to read this article.I would like to thank you for the efforts you had made for writing this awesome article. This article inspired me to read more. keep it up AWS training in chennai | AWS training in annanagar | AWS training in omr | AWS training in porur | AWS training in tambaram | AWS training in velachery

    ReplyDelete
  49. Saas is a wonderful software once upon a time. Nowadays, it may be get security risk. Moreover, your post give clear information about it. Also, you said whether use it or not. Thanks for helping to every saas users.

    Web Development company in Madurai

    ReplyDelete
  50. This comment has been removed by the author.

    ReplyDelete
  51. http://www.unlimitednovelty.com/2012/03/why-critics-of-rails-have-it-all-wrong.html?showComment=1544258871779

    ReplyDelete
  52. I searched a lot of places and finally found this here. My heartfelt congratulations to you.
    Drop Taxi in Trichy | Drop Taxi in Coimbatore

    ReplyDelete
  53. Excellent effort to make this blog more wonderful and attractive.
    data science course in malaysia

    ReplyDelete
  54. Skyrocket your career with the amazing Azure training in Chennai with Infycle Technologies, the best software training institute in Chennai. Along with that, get other software courses such as DevOps, Big Data Hadoop, Digital Marketing, Python, Oracle, Java, Web Development, Selenium, Mobile App Developments with 100% hands-on practical methods. Dial 7502633633 for a free demo to the best placements in the MNC's with the high salary packages.

    ReplyDelete
  55. Those guidelines additionally worked to become a good way to
    recognize that other people online have the identical fervor like mine
    to grasp great deal more around this condition.
    oracle training in chennai
    ASP.NET Training in Chennai

    ReplyDelete
  56. add comment - Best indian wholesale and retail apparel garment market overviews. Textile industrial market plays a leading role in Indian Economy. Whole Sale Market Visit WholeSaleMarketNow and shop your favorite items at discounted price.

    ReplyDelete
  57. Your website has a lot of good articles about science, technology, life,... I also make websites, but I aim to entertain with light and interesting games. Come to my website by clicking the link below to explore it.

    friday night funkin download

    fnf mods download

    ReplyDelete
  58. Creative Marketers BD is a team of skilled digital marketers for offering quality SEO, Content Writing and Graphics Design, and Web Development works. We are providing Digital Marketing Services both for companies and individuals.

    Are you Looking for cost effective SEO Service Provider Company in Bangladesh for design or develop your website? So you are the right place to start! With Creative Marketers BD, get the best responsive website design for your online business. We are here to help your business to be a success! We can expand your business through reaching to the right audience.

    To expand your business locally or globally, Creative Marketers BD is the perfect choice for you. If you want to grow your business with the help of effective digital marketing works, Creative Marketers BD is available to assist you wholeheartedly.

    ReplyDelete
  59. Thank you for providing us with this useful information.
    Custom ERP Softwares.

    ReplyDelete