Mr. Khalid Shaheen, CEO, Bahraini Saudi Bank, said, "This certification will enhance our internal security processes and maintain international standards with regard to internal controls on information. BS7799 enhances capabilities in various domains such as Policy, Access control, System development, Business continuity planning and Legal Compliance. These capabilities result in better risk assessment and prioritization."
The BS7799 certification provided BSB with well defined and documented security policies, processes and guidelines to preserve the confidentiality, integrity and availability of information at all stages of the information lifecycle. Bahraini Saudi Bank expects this certification to benchmark its information security processes against global standards. The certification will help build credibility and trust among the stakeholders, ensure compliance with relevant regulations, and maintain proactive security management for a comprehensive security culture at all levels in the organization.
"We contacted Wipro for this critical project to build a proactive security response at our bank. Their experience in handling security projects, deep understanding of our business needs, access to appropriate technologies and commitment to see the project through from end to end were instrumental in partnering with them", added Mr. Khalid Shaheen.
Dr. Anurag Srivastava, Vice President, Consulting Services, Wipro Ltd said,
"The objective of this project was to identify the gaps in Bank's Information Security posture and recommend mitigation measures, thus enabling Bahraini Saudi Bank to strengthen its Information Security framework."
The security governance team of Wipro's Consulting Division undertook a phase-wise approach to take Bahraini Saudi Bank up to BS 7799 standards. The scope of engagement in the advisory phase involved risk assessment, gap assessment, risk prioritization, control selection and risk mitigation. The scope of engagement also involved IT audit, vulnerability assessment of OS and applications, patch management and review and update of network architecture. The team of Wipro consultants worked closely with the IT team at BSB during the rollout and implementation phase. This involved conducting training workshops for their staff and advisory during the implementation of policies and procedures. Wipro also extended certification support to the Bank by carrying out pre-assessment exercises and facilitated audit compliance.
"To build a robust information security system at BSB, Wipro deployed its proven framework to ensure protection and an optimum level of assurance for the security controls deployed. Wipro brought consultative experience as well as practitioner experience on the subject," concluded Dr. Srivastava.

Posted by Anne-Birte Stensgaard, Senior News Editor



