Bank’s Cyber security framework is in-line with BOT Cyber Security Framework and other best practices to protect Bank’s valuable IT assets from cyber-attacks. Application of cyber security framework enables communication about security risk priorities and activities in business terms, turning potential organizational risk into competitive advantage. The Cyber Security Policy is supported by the Information Security Policy. Bank of Baroda (Tanzania) Limited has an appropriate access control mechanism to ensure that the data integrity is maintained for API (Application Programming Interface) integration/s. Bank of Baroda (Tanzania) Limited perform periodic vulnerability assessment, configuration audit and penetration testing on all IT assets in the cyber space, to detect any vulnerabilities /weakness existing in the IT assets that can be exploited by the cyber threats. Penetration testing of public facing systems and other critical applications/critical information infrastructure are carried out by professionally qualified teams/individuals.
Notice and Disclosures
Data Quality and Access The vision informing this policy framework is that the Bank of Baroda (Tanzania) Limited data is accurate, reliable, understood, and is provided and used in a meaningful, secure and consistent manner. Bank of Baroda (Tanzania) Limited takes all steps possible to ensure that the data on the website is accurate. While reviewing the website if something is found to be inaccurate Bank of Baroda (Tanzania) Limited will make every effort to correct said information as quickly as possible. If it is found to be an inaccuracy with the entire system Bank of Baroda (Tanzania) Limited will work swiftly to correct the problem so that customer web experience is as trouble free as possible.
Application Security Audit
A Sitecore CMS is used in the Bank of Baroda (Tanzania) Limited website for displaying the information dynamically as per the users’ requests. The application has been security audited for the known application-level vulnerabilities as per CERT-In Guidelines, NIC Guidelines, OWASP standard in India and other Best Practices and the application security vulnerabilities have been addressed before the launch of the Portal. The website will be audited by Cert-in empanelled agency periodically in India. A periodic check on the requirement of a security certificate is recommended to the web information manager in case there are changes in the functionality or any other environmental changes.
Server Audit
The application and database servers hosting the Bank of Baroda (Tanzania) Limited website and databases have undergone security audits, and server hardening has been implemented in India. Access to the servers is restricted both physically and through the network to the greatest extent possible. Logs are maintained to track authorized physical access to the Bank of Baroda (Tanzania) Limited in India. All development work is carried out in a testing environment and thoroughly tested on a staging server before being deployed to the production server. Content is reviewed and approved by the relevant authority before being published on the website. All web page contents are checked for both intentional and unintentional malicious content prior to final upload. Audits and logs of all activities related to the operating system, system access, and application access are maintained and archived. System software patches, bug fixes, and upgrades are regularly deployed and reviewed. Antivirus software has been installed on the servers and is regularly updated online.
Data Security
Bank of Baroda (Tanzania) Limited, driven by its information security requirements and objectives, is committed to protect all its information and information assets processed at or stored on its IT systems and transmitted over its networks by appropriately protecting the confidentiality, integrity , availability, Authenticity, Nonrepudiation and Accountability of the same through its well established Information Security Management System (ISMS) Accordingly all the users shall exercise great caution and utmost restraint while dealing with the information and information processing assets of the Bank of Baroda (Tanzania) Limited. The focus is to protect and maintain confidentiality of customer information.
Website Access Rights
Website is accessible in entire world except Countries like China, North Korea, Pakistan, Russia, Taiwan, Afghanistan, Brazil, France, Indonesia, Iran, Mexico, Netherlands, Syria, Turkey, Ukraine, Vietnam and necessary firewall rule has been applied in the system keeping in view to mitigate the cyber-attacks and accordingly firewall rules are updates.