Card Record
Banks not taking credit card data security seriously
The next time you swipe your debit card at a petrol bunk, use a credit card to buy a movie ticket or pay a bill online, do it at your own risk. A new survey of security in Indian banks has revealed that many of them do not follow even basic measures to ensure card security or protect your personal information.
The survey finds that banks in India lag in security of cards transactions. "Against the backdrop of well known global cases of card breaches, it is surprising to note that basic measures for ensuring card security have not been adopted by many of the banks," points out the survey done by the Data Security Council of India and KPMG, under the aegis of CERT-In (Computer Emergency Response Team), the cyber security wing of the ministry of information technology.
In all, 20 public sector, private and foreign banks were surveyed and their chief information security officers (CISOs) interviewed for the study. The survey found that banks still follow highly risky practices such as storing and printing authorisation information like CVV numbers and expiry dates, and non-masking of card numbers. Merchants are allowed to create card records in plain text. All such practices followed by banks are "non-conformant to globally accepted practices for card security," the survey report states.
Most banks have put in place security provisions such as SMS alerts, a separate transaction password and a virtual keyboard for online banking, but this is not enough. According to the study, the banks have still not introduced features that will make card transactions secure such as one-time-password (a dynamic token), an identity grid and risk-based authentication.
Such additional security features are necessary because in an electronic card payment system, data is directly accessed and processed by customers, service providers as well as other partner institutions. While an integrated environment like this has made the banking experience smooth for customers, it has introduced new risks.
The survey says that while most banks enforce basic 'hygiene factors' like enforcement of password policy, password change at first login, account lockout and session timeout, some of them do not enforce expiry of password after a stipulated time. Technology systems in 37 per cent of surveyed banks require download of external applications or mobile code, which increases vulnerabilities. Most CISOs interviewed felt that managing security of online banking remained challenging task. Hotels in Manali
When it comes to privacy of customer data, the scenario is worse. Though the IT (Amendment) Act, 2008 has provisions for privacy of data, concrete systems for customers' privacy protection are yet to be implemented by many banks, the study says. Almost 80 per cent of the banks surveyed did not have a separate privacy function. Three-quarters of the banks surveyed had security teams comprising less than 10 people.
Survey results indicate that banks are constantly being exposed to sophisticated, organised and financially motivated threats and customers are being targeted through phishing, vishing and smishing attacks. Yet banks don't have mechanisms in place to track fraud and continue to largely depend on incidents being reported by customers and employees.
Internal management systems of banks are also not fully geared for the digital age. "Information security has no or minimal role in fraud management. The silo in the security and fraud management role would lead to a significant gap in banks' effort to curb financial frauds as security compromises are seen as a tool for committing financial frauds," the study says.
Information security is still seen as an IT-centric function, in contrast to global trend of positioning security as an important corporate function. The only silver lining, according to the study, is that most banks have in place appropriate protocols to ensure security of payment gateways.
Banks also encrypt card numbers and other confidential data during storage and transit. "The significance of data protection and privacy has been underscored in the IT Act, but understanding of this issue in many banks is still lacking," said Dr Kamlesh Bajaj, chief executive officer, DSCI. "Banks also need to understand the key role chief information security officers should be made to play in their overall business strategies."
Lack of adequate security and data protection measures can make customers vulnerable to attacks from fraudsters and could result in hacking or misuse of their bank and credit card accounts. The survey reveals that banks do not feel constrained due to inadequate budgets or technical skills for information security.
But they seem to be neglecting security issues due to "increasing omnipresence of banking services and endeavour to enhance customer experience", the report notes.
Banks must align internal policies, procedures and deploy technology safeguards for protecting sensitive personal information, it is suggested. Survey results reveal that understanding of data privacy in the banking sector is growing with over half of the respondents being aware of privacy principles and roles and entities for data protection.
However, data privacy has not yet fully permeated into the banking sector. Implementation of specific measures like formulation of privacy policies, privacy impact assessments and embedding of data privacy in business processes have not gained significant traction, the report pointed out.
With the customer base of banks growing, the study says, it is the responsibility of banks to make consumers aware of security issues. Some banks have launched media campaigns, but more needs to be done.
About the Author
Working with a WRS Info India Pvt Ltd.
PBS Frontline Secret History of the Credit Card
 |
 Pinnacle Dazzle DVD Recorder DVC100 Video Capture Card Record XBOX PS3 Games $33.90 Time Remaining: 16d 20h 3m Buy It Now for only: $33.90 Buy It Now |
 Ted Williams 1959 Fleer Card 63 Teds All Star Record $10.00 (9 Bids) Time Remaining: 1h 24m |
 1948 SWELL SPORT THRILLS BOB FELLER STRIKEOUT RECORD BASEBALL CARD $23.50 (4 Bids) Time Remaining: 32m |
 7 WHITE CARD RECORD SLEEVES pack of 25 $11.05 Time Remaining: 19d 7h 1m Buy It Now for only: $11.05 Buy It Now |
 LUIS APARICIO 2003 TOPPS RECORD BREAKERS AUTO HOF BALTIMORE ORIOLES AUTOGRAPH $18.00 Time Remaining: 2h 35m |
 7 inch GREEN CARD RECORD SLEEVES pack of 25 $12.63 Time Remaining: 19d 6h 58m Buy It Now for only: $12.63 Buy It Now |
 AE FREHLEY 1978 SOLO RECORD COMPLETE kiss vinyl gene paul peter comic cards $18.51 (10 Bids) Time Remaining: 32m |
 Yankee Babe Ruth 1992 Megacards Ruth Collection 75 First HR Record 29 $1.99 Time Remaining: 32m |
 1987 Boardwalk All Time Record Holders set of 44 Mickey Mantle Babe Ruth Banks $5.00 Time Remaining: 20d 14h 7m Buy It Now for only: $5.00 Buy It Now |
 CHELSEA RIGHT TO WORK 1ST PRESS CARD PS PUNK UK 77 hc kbd punk 7 45 $19.99 Time Remaining: 1h 2m |
 7 ORANGE CARD RECORD SLEEVES pack of 25 $12.63 Time Remaining: 27d 7h 29m Buy It Now for only: $12.63 Buy It Now |
 Vintage LP Rolling Stones Exile on Main St 1972 Double Set+12 post cards $19.99 Time Remaining: 3h 39m |
 NOLAN RYAN 1991 TOPPS DESERT SHIELD RECORD BREAKER RANGERS 6 $22.49 (6 Bids) Time Remaining: 3h 40m |
 Christmas Card Address Record Book Santa 6 Years $5.89 Time Remaining: 2d 47m Buy It Now for only: $5.89 Buy It Now |
 1989 TOPPS DON MATTINGLY 88 record breakerr 2 $0.99 Time Remaining: 36m |
 CHIPPER JONES 2003 Topps AUTOGRAPH JERSEY CARDS on card auto RECORD BREAKER $50.00 Time Remaining: 29d 23h 2m Buy It Now for only: $50.00 Buy It Now |
 WILT Chamberlain lakers 2010 11 gold standard REAL 14k GOLD RUSH records 10 10 $57.00 (3 Bids) Time Remaining: 39m |
 Record Your Own Greeting Cards $9.41 Time Remaining: 18d 20h 26m Buy It Now for only: $9.41 Buy It Now |
 RENAISSANCE TURN OF THE CARDS LP VG+ PROG $3.99 (1 Bid) Time Remaining: 1h 46m |
 Nolan Ryan 2003 Topps Record Breakers Game Jersey $6.60 (6 Bids) Time Remaining: 1h 11m |
 Nolan Ryan Express Baseball Card Record Highlights NM in plastic sleeve CS $1.25 Time Remaining: 6d 10h 50m Buy It Now for only: $1.25 Buy It Now |
 RUSTY DRAPER SINGS 7 EP PIC SLEV HEAVY CARD ARGENTI VG $18.00 Time Remaining: 1h 23m |
 ALABAMA SHAKES Boys Girls LP SEALED w bonus 7 download card $15.99 Time Remaining: 8d 2h 21m Buy It Now for only: $15.99 Buy It Now |
 DANBURY MINT McGWIRE SOSA 1998 BREAKING THE HOME RUN RECORD GOLD CARD SET $15.00 Time Remaining: 36m |
 1957 Sweetule Cigarettes Blue Back Sports Records 21 JOE LOUIS PSA 8 $99.99 Time Remaining: 1h 34m Buy It Now for only: $149.95 Buy It Now |
 The Promise by Michael Card CD Sep 2001 Sparrow Records $6.99 Time Remaining: 29d 21m Buy It Now for only: $6.99 Buy It Now |
 MIKE SCHMIDT 2005 FLEER NATIONAL PASTIME HISTORICAL RECORD 1350 1987 F6400 $1.99 Time Remaining: 37m |
 Christmas Family Memories and Card Address Record Book Mary Engelbreit $5.89 Time Remaining: 2d 48m Buy It Now for only: $5.89 Buy It Now |
 VINCE CARTER 06 FULL COURT RECORDS AUTO AUTOGRAPH JERSEY ed26 50 $22.99 Time Remaining: 1h 39m |
 RARE BING CROSBY 17 RECORD 45 BOX SET W BOOKLET BUSSINESS REPLY CARD Near MINT $19.99 Time Remaining: 46m |
 7 YELLOW CARD RECORD SLEEVES pk 25 $12.63 Time Remaining: 17d 8h 6m Buy It Now for only: $12.63 Buy It Now |
 1984 FRANCO HARRIS TOPPS RECORD BREAKER 3 $0.10 Time Remaining: 1h 16m |
 13 ORIGINAL 1930s MOTOR RACING ACES GRAND PRIX SPEED RECORDS CIGARETTE CARDS $10.89 Time Remaining: 29d 10h 32m Buy It Now for only: $10.89 Buy It Now |
 Rare Robin Ventura Rookie Card NO CURRENT MAJOR LEAGUE RECORD Back No or Make $0.50 Time Remaining: 34m |
 1987 TOPPS ST LOUIS CARDINALS TEAM SET OZZIE SMITH TODD WORRELL RECORD BREAKER $4.69 Time Remaining: 29d 14h 52m Buy It Now for only: $4.69 Buy It Now |
 RAY ALLEN 2010 11 GOLD STANDARD GOLD RECORDS DIE CUT JERSEY 299 BOSTON CELTICS $2.00 (3 Bids) Time Remaining: 35m |
 iTech mDVR Mobile Digital Video Recorder w SD MMC Card Slot Record TV Movie $0.99 Time Remaining: 1d 19h 36m |
 HORRIBLE CROWSELSIE W DOWNLOAD CARDVINYL $14.95 Time Remaining: 29d 17m Buy It Now for only: $14.95 Buy It Now |
 SIR MALCOLM CAMPBELLS RECORD SETTING AUTOMOBILE BLUEBIRD POST CARD $2.50 (1 Bid) Time Remaining: 38m |
 100 BCW 45 RPM Record Poly Sleeves 7 3 8 X 7 5 8 NEW PS $6.69 Time Remaining: 5d 21h 29m Buy It Now for only: $6.69 Buy It Now |
 PHISH Junta RSD 2012 UNSEALED but COMPLETE 3x LP MP3 card POLLOCK print $70.99 (2 Bids) Time Remaining: 3d 21h 40m |
 1979 Topps RECORD BREAKERS card lot 095 $19.95 Time Remaining: 37m |
 2012 Topps Heritage Albert Pujols Record Book Rangers Bow to Pujols WS3 144 $1.49 Time Remaining: 29d 20h 32m Buy It Now for only: $1.49 Buy It Now |
 Wayne Gretzky 1995 96 Upper Deck Wayne Gretzkys Record Collection Header Mint $3.49 Time Remaining: 1h 59m |
 Dr Dre The Chronic 2001 Album 2LP + MP3 DOWNLOAD CARD 12 Vinyl $39.99 Time Remaining: 23d 3h 17m Buy It Now for only: $39.99 Buy It Now |
 1989 FLEER for the record KIRK GIBSON 4 $0.99 Time Remaining: 33m |
 1991 TOPPS DESERT SHIELD CAL RIPKEN JR RECORD BREAKER PSA 8 $14.99 Time Remaining: 4d 18h 49m |
 25 12 CARD REPLACEMENT BLACK RECORD SLEEVES NEW $12.63 Time Remaining: 2d 19h 29m Buy It Now for only: $12.63 Buy It Now |
 Don Senay THE EDGE OF LOVE EX Debut 78 112 Mingus w Down Beat Promo Card+Pic $11.76 (4 Bids) Time Remaining: 2h 5m |
 DROPKICK MURPHYSLIVE AT FENWAY PARK W BASEBALL CARDS2 VINYL SET $19.50 Time Remaining: 25d 4h 7m Buy It Now for only: $19.50 Buy It Now |
 WADE BOGGS autograph 1989 TOPPS signed card RED SOX auto RECORD BREAKER $8.49 (4 Bids) Time Remaining: 1h 47m |
 Malachai Sale Price: $0.99  Eligible for free shipping!Availability: Usually ships in 1-2 business days See Reviews For This Product  |
 Transcend 8 GB Class 6 SDHC Flash Memory Card TS8GSDHC6E Sale Price: $12.09 Eligible for free shipping!Availability: Usually ships in 24 hours See Reviews For This Product DescriptionTranscend and Amazon.com have teamed up to offer this item in Amazon Frustration-Free Packaging, a recyclable, easy-to-open alternative to traditional packaging. A Frustration-Free Package comes without excess packaging materials such as wire ties, hard plastic "clamshell" casings, and plastic bindings... |
 How to Channel from the Akashic Records When You Are Reading Tarot Cards Sale Price: $26.99 Eligible for free shipping!Availability: Usually ships in 24 hours See Reviews For This Product |
 In Rainbows List Price: Sale Price: $7.99 You save: $5.99 (43%) Eligible for free shipping!Availability: Usually ships in 24 hours See Reviews For This Product DescriptionOn the deliriously satisfying In Rainbows, Radiohead returns to a more straight-ahead (though subdued) rock sound. Much hubbub has been made about this record's innovative release. Radiohead allowed fans to pay what they wished to download fairly low-resolution tracks from the band's own website... |
 2011 Topps Baseball Cards Complete 330 Card Set (Series 1) - Includes 30 Rookies, League Leaders, Record Breakers, MVP Winners, ROY Winners, and more!! Sale Price: $35.04 Eligible for free shipping!Availability: Usually ships in 24 hours See Reviews For This Product Description2011 Topps Baseball Cards Complete 330 Card Set (Series 1) - Includes 30 Rookies, League Leaders, Record Breakers, MVP Winners, ROY Winners, and more!! |
 Poker: The Complete Chip and Card Handling Series List Price: Sale Price: $10.84 See Reviews For This Product DescriptionUsing his skills as both a magician and a poker player, Rich Ferguson shows the viewer how to look like a pro on poker night. This four-volume set features CHIP TRICKS, CARD STUNTS, SHUFFLES & CUTS, and FLOURISHES... |
 Creative Labs SB0950 ExpressCard Sound Blaster X-Fi Notebook Audio System List Price: Sale Price: $64.71 You save: $25.28 (28%) Eligible for free shipping!Availability: Usually ships in 1-2 business days See Reviews For This Product DescriptionCreative Labs X-Fi 70SB095000004 External Sound Box 70SB095000004 84 |
 Rediform Employee Time Card, Weekly, 4.25 x 7 Inches, 100 per Pad (4K409) List Price: Sale Price: $6.81 You save: $1.18 (15%) Eligible for free shipping!Availability: Usually ships in 24 hours See Reviews For This Product DescriptionFor manual time records Space for hours worked, overtime, pay rate, job number/description, earnings and deductions. Global Product Type: Time Clock Cards; OEM Card Number: N/A; Clock/Recorder Compatibility: N/A; Size: 4 1/4 X 7. |
 Dazzle Video Creator Plus HD List Price: Sale Price: $74.06 You save: $5.93 (7%) Eligible for free shipping!Availability: Usually ships in 24 hours See Reviews For This Product DescriptionView larger. View larger. Dazzle Video Creator Plus HD combines a high-quality video capture device with the easy-to-use HD video editing software. It has never been easier to wow friends and family, anytime, anywhere, with great looking videos... |
 30 Lesser Cut White 40mil Record Divider Cards for 12" (33-1/3pm) Vinyl Records #12NS13WH - 12" x 13 1/8" (Dividers / Section Seperators / Bin Cards / Separators) Sale Price: $40.99 Eligible for free shipping!Availability: Usually ships in 2-3 business days See Reviews For This Product DescriptionThese divider cards are perfect for organizing your 12" Records! They are professional, heavy duty store grade divider cards - made out of 100% virgin high impact polystyrene (HIP). They are strong stuff! These cards are rectangles with rounded corners (it eliminates jabbing yourself on the sharp corners!) Great for use with a permanent marker, or, affix a label! These dividers are reusable - if you don't need that section anymore, just turn it around or turn it over! =) |
