BPO security

Information security has emerged as a significant concern for banks, mobile phone companies and other businesses that use call centers or business process outsourcing, or BPO. There have been instances of theft of personal data reported from call centers.

Britain's Financial Services Authority examined standards in India in April 2005 and the Banking Code Standards Board audited eight India-based call centres in 2006, handling more than a million calls per month from the UK. the examinations did not extend to Africa-based call centres staffed by workers of Indian origin.

The BCSB report stated that "Customer data is subject to the same level of security as in the UK. High risk and more complex processes are subject to higher levels of scrutiny than similar activities onshore." [1]

India's NASSCOM has said that they take breach in security extremely seriously and will assist the police in their probe.

Common countermeasures

There are three identifiable types of illicit activities concerning fraud emanating from call centers:

  1. Crooks who pretend to be legitimate call centres.
  2. Hackers who gain access to call centre information through illegal means
  3. Call centre agents who illegally misuse the information they have access to in call centres.
  4. 3rd and 4th party software implementation, allowing for "back-doors" to be entered remotely, sometimes under the "credentials" of security.

While items 1 and 2 are mostly subject to police action, call centres can use internal procedures to minimise risk. Such mitigation measures include but are not limited to:

  1. Creating a paperless environment, preventing employees from writing down and removing information by ensuring that all work processes are done on the computer, without having to record anything on forms or notes.
  2. Prohibiting the use of cellphones and cameras on the floor.
  3. Prohibiting paper, pens and digital recording devices from being brought onto the floor.
  4. Preventing internet access for employees on the floor.
  5. Limiting functionality and access of personal computers or terminals used by call center agents (for example, disabling USB ports). Companies may also use data loss prevention software to block attempts to download, copy, or transmit sensitive electronic data.[2]
gollark: That.
gollark: DEPLOY ANTI-THING APIONODES
gollark: OH NO
gollark: I can't see myself using it, although it... could be neat maybe I guess.
gollark: It's like a stupider horrible lisp. Some offense.

See also

References
  1. Outsourcing thriving in Britain despite India bash
  2. Call Center Security How: to Protect Employees and Customers


This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.