‘Systemic’ risk: The Hindu Business Line Editorial
With cyber-attacks on the rise, banks need to increase investments in tech and processes
The fraud of over ₹94 crore at the Pune-based Cosmos Co-operative Bank, involving the breach of the firewall in servers that authorise ATM transactions, has once again raised questions over the efficacy (the ability to produce a desired or intended result) and adequacy of security measures in Indian banks. True, the fraud at Cosmos Bank was part of a highly orchestrated (arranged with thorough planning or maneuvering) global fraud by cyber criminals. But the fact that the co-operative bank had fallen prey (target) to a massive attack that involved fraudsters compromising payment systems across the world, cannot be used as an excuse to downplay (to make something appear less important than it really is) the gravity (seriousness) of the incidence. If anything it has laid bare the vulnerability of banks in India — not necessarily just the smaller banks — to such ingenious (cleverly and originally devised and well suited to its purpose) cyber-attacks.
From what is known, at the heart of the Cosmos fraud was the setting up of a proxy switch to approve fake transactions. A switch normally authenticates the card information and also connects to the bank’s Core Banking Solution (CBS), before dispensing the cash at ATM. In the case of Cosmos, the fraudsters had developed a proxy switch that bypassed all these checks and authorised fraudulent transactions. The SWIFT system — a messaging network for securely transmitting instructions for financial transactions — was also compromised to transfer money fraudulently to banks outside. With data suggesting that co-operative banks and smaller financial institutions are not spending much on cyber security and security systems, it is clear that they are likely to fall prey to more such cyber-attacks. Earlier this year, City Union Bank’s SWIFT had come under attack, and nearly $2 million was transferred to three banks abroad. But it is not just smaller players that have been tardy (slow in action) in tightening their security systems. The gaping lapses in the control measures at larger commercial banks have been on the RBI’s radar for some time now. Shockingly, about 30 per cent of the 2 lakh-odd ATMs in the country still operate on Windows XP and other unsupported operating systems. Industry players suggest that around 40,000-odd ATM machines need immediate upgradation. Clearly, others — even large commercial banks — could fall prey to cyber-attacks.
With the shift to digital in banking transactions, gaining pace, massive breaches can happen at multiple levels. Banks hence will have to up their ante (pay an amount of money in advance) to offer a more reliable and secure environment. Above all, there is an urgent need for spring cleaning (clean thoroughly) governance, risk management and processes at banks. At the core of nearly all frauds — even the ₹14,000-crore heist (robbery) at PNB — lies the involvement of insider officials who game the system. In case of co-operative banks in particular, it is time that the 2015 recommendations of the committee constituted by the RBI, on conversion of Urban Co-operative Banks into joint stock or small finance banks, issue of fresh licenses and constitution of boards of management are reviewed.
IMPORTANT WORDS FOR ARTICLE & THEIR MEANING
1. Efficacy (Noun) – The ability to produce a desired or intended result (प्रभावकारिता)
Synonyms – Efficiency, Productiveness, Adequacy, Competence, Effectiveness, Potency, Virtue, Ability, Capability, Capacity, Influence
Antonyms – Inadequacy, Ineffectiveness, Enervation, Idleness, Impotence, Inability, Inactivity, Incapacity, Incompetence, Inefficiency, Lethargy
2. Orchestrate (Verb) – To arrange or manipulate, especially by means of clever or thorough planning or maneuvering (गुप्त रूप से आयोजित करना)
Synonyms – Arrange, Coordinate, Manage, Set up, Blend, Compose, Concert, Harmonize, Integrate
Antonyms – Disperse, Divide, Separate, Disorganize, Ignore
3. Prey (Noun) – Target of attack (शिकार)
Synonyms – Dupe, Mug, Pillage, Quarry, Raven, Sufferer, Underdog, Victim
Antonyms – Attacker
4. Downplay (Verb) – To make something appear less important than it really is (कम करके बताना)
Synonyms – Minimize, Lessen, Play down, Soften, Devalue, Deemphasize, Make light of, Think nothing of
5. Gravity (Noun) – Seriousness (गंभीरता)
Synonyms – Consequence, Severity, Significance, Solemnity, Urgency, Acuteness, Concern, Exigency, Momentousness, Weightiness
Antonyms – Insignificance, Frivolity, Levity, Silliness
6. Ingenious (Adjective) – Cleverly and originally devised and well suited to its purpose (विदग्ध )
Synonyms – Inventive, Shrewd, Skillful, Sly, Subtle, Adroit, Artistic, Canny, Cunning, Deviceful, Dexterous
Antonyms – Dull, Foolish, Honest, Stupid, Dumb, Ignorant, Incompetent, Inept
7. Tardy (Adjective) – Slow in action (सुस्त)
Synonyms – Delinquent, Sluggish, Dawdling, Detained, Dilatory, Laggard, Loitering, Procrastinating, Retarded, Slack
Antonyms – prompt, Punctual, Ready
8. Ante (Noun) – Pay an amount of money in advance (दाँव पर लगा धन)
9. Spring cleaning (Verb) – To clean thoroughly (नवीकरण)
10. Heist (Noun) – Burglary (सेंधमारी)
Synonyms – Robbery, Caper, Holdup, Larceny, Theft, Pilferage, Stickup
