Authored by Mr Mayur Joshi and Mr Pradeep Akkunoor, who head ICS, the report argues that the focus of information security standards remains at the process and infrastructure level, and rarely deals with the people aspect of security.

Mr Akkunoor said that the solution is to implement a standard framework by which fraud can be reported. 'Anonymous reporting should be made possible,' he said, suggesting that there be a hotline, or an anonymous e-mail ID to which people can report the matter.

Citing a 2004 report by US-based Association of Certified Fraud Examiners on occupational fraud and abuse, Mr Akkunoor said that in the US, fraud was reduced by 60 per cent when a hotline was made available. 'In fact, fraud is discovered through tip-offs 40 per cent of the time.'

He suggested that a body such as Nasscom could provide this service as a neutral third party. ICS has made recommendations to the association and is about to conduct talks with the same.

Apart from the framework, ICS advocates training in ethics. The report on the spot tests states that more than 90 per cent of the respondents were not aware of any whistle-blowing policy, and most of them were not even clear on what constitutes fraud and what doesn't.

Mr Akkunoor said that educating the employees is important, since most of them are fresh out of college and may not understand the industry and the significance of their actions.

Taken from Business Line

thehindubusinessline.in