Abbhisht Panddey’s Post

View profile for Abbhisht Panddey, graphic

Security Operations |Fintech |Risk Management |Governance l App Sec #viewsarepersonal #apolitical

https://lnkd.in/djUnv6Qu Digital economy rests on digital trust. RBI comes up with a draft framework on alternate authentication measures for digital transactions. It is a much needed , righty timed , forward looking and risk focussed policy intervention. Recently Monetary Authority of Singapore also came up with a similar directive. The key highlights and points to ponder are: 1. The gap between digital product outreach and customer digital awareness has created globally lucrative avenues of cyber crimes. Allmost all (excluding the remote sharing apps) cyber thefts leverage the OTP sharing by customers. 2. The telecom ecosystem is trying very hard through multiple measures to arrest the perpetuation of frauds through SMS. Sanchar Saarthi , Standardisation of SMS templates , registration of bulk sms senders etc. are wonderful steps but falling short of preventing frauds. 3. What needs to be seen is what risks alternate authentication channels will bring about. We recently heard about AEPS frauds using biometrics and concerns around live tissue scanning. 4. Token providing applications , if sitting on customer devices are also susceptible to similar risks as the OTP, until stringent containers are created. Getting the security implemented might be a challenge based on the deep penetration of digital products and variety of devices in use by our customers. 5. With systemic and transactional cyber threats looming large , such policy interventions help us to leverage mutiple technologies for enabling safety and security of our stakeholders. 5. As mentioned by RBI , Risk based authentication framework are the key for leveraging this direction in true spirit.

RBI issues draft framework on Alternative Authentication Mechanisms for Digital Payment Transactions

RBI issues draft framework on Alternative Authentication Mechanisms for Digital Payment Transactions

m.economictimes.com

Durgesh P. Sharma

IS Audit | HDFC Bank | Ex-SBI | BITS Pilani | Recognized as CCSK Contributor by CSA | CISSP | CISA | CEH | TOGAF | ITIL Expert | ISO 27001 LA | ISO 27701 LA | ISO 22301 LA | Views are personal |

4mo

Rightly pointed out by you Abbhisht Panddey at serial no 1, the increasing sophistication of cyber threats requires stronger and more resilient authentication mechanisms beyond SMS based OTPs, which has vulnerabilities like SIM swapping and phishing.

To view or add a comment, sign in

Explore topics