AddressImplementation, Management and monitoring all cyber security Solutions/ Devices/components.
Deployment and Installation of all in scope solutions and their monitoring
Upgradation of all in scope solutions and their monitoring
Identification of security events that are true positive before qualifying event as an incident.
Periodic and planned update of firmware/definitions/patches of all security Solutions/components/ devices and other tools.
Fine tuning configuration of the security solutions/components for obtaining optimum usage of the system as per the Bank’s requirement.
Periodically evaluate the access device configurations and patch levels to ensure that all access points, nodes between (i) different VLANs in the Data Centre/DR/NDR/HO/CO other locations
(ii) LAN / WAN interfaces (iii) Banks network to external network and extranet are securely configured.
Closely monitoring of overall health of the all solutions and submit reports to the Bank with related parameters on a daily basis.
Application whitelisting for desktops and Servers
Deployment of various agents for endpoints and servers and maintenance and monitoring of the same
Periodically provide reports for all availability and performance parameters along with log of all issues that have been raised and closed/Pending for closure. The frequency of these reports would be Daily, Weekly, Monthly, Quarterly and Yearly as per Bank’s requirement. Apart from the reports on each availability and performance measurement parameter, the reporting should
also include but not limited to: Utilization of Session, queue, CPU, RAM, Disk space, I/O (Peak and Average) etc.
Mitigation and compliance of Information security/cyber security /RBI IT Examination audit points/ VAPT Audit Points/ Internal IS audit Points/ Points pertaining any other internal/external Audit undertaken in the Bank.
Management of VAPT Tool deployed in the Bank including but not limited to Performing Scans, Management of the system, Updating of plugins and patches, etc.
Configuration of application control functionality in Firewall/WAF/NIPS and review and monitor the same.
Making required setup and monitoring the traffic to find out security threats/incidents during the course of Cyber Drill conducted by the Bank or any external agency or regulatory bodies.
FM Engineer should maintain the backup of all necessary files including configuration file, in line with Bank’s Information security policy /Cyber security policy. Restoration testing process of the backup has to be carried out and recorded on periodic basis all applicable security solutions.
Solutions to be upgraded to recommended levels by OEM immediately on availability of upgrade/patches.
Collect, correlate and review all incidents reported by all other security devices (e.g., Firewalls,
IPS, vulnerability assessment, etc) in coordination with SIEM team
Analysis of events & alerts generated by the security devices
Analysis of event correlation logs in coordination with SIEM team
Analysis of traffic statistics as reported in the firewall connections’ information
