In a recent case, one of the leading players in the Pharmaceutical industry desired “To review existing Policies and Practices on preventing Information Leakage in the factory area covering the Production, Plant Gate, IT Infrastructure, R&D and Quality Control section and to suggest remedial measures”. What prompted this business to secure Information systems was a review by the US FDA (US Food and Drug Administration) for granting license to their facilities. The US administrator considers Information system as a critical part of the manufacturing process.
The business had adopted several standard operating procedures to avoid leakage of information. They had blocked all electronic mails ‘to’ popular public mailing systems such as Google, Yahoo and Rediff mail. Most of the communication devices such as scanners, photocopying machines and mobile phones were disabled for copying and transmitting. Closed circuit cameras were installed to capture the overall activities of the employees. The IT department has hastily put together some randomly created Standard Operating Policies (SOPs) that would manage the email system, the IT infrastructure and the server room.
On the face of it, the measures adopted by the business would have, to a greater extent, prevented the flow of unwarranted information from within the facility to the outside world. But this was not the case!
As a first step towards checking the robustness of the system that had been implemented a couple of tests were instituted. The business managers were of the opinion that information on the computer systems could not be transferred to a remote location without the active connivance of the device owner. Inspite of these measures the investigators, with the help of Bluetooth technology and when the device owner was not at his work station were able to transfer documents from a computing device to a mobile device. In another case an email was delivered to an unknown address from a desk top system without the knowledge of the work station owner. Both the cases indicated a lack of operational understanding on the part of the employees to treat information in a sacrosanct way and some of the possible shortcomings of the planned system.
Considering the initial results that exposed the vulnerability of the system that was in place, an elaborate audit procedure was adopted. Various operational aspects of the facility were checked that mapped extensively over most of the departments.
1. The inventory of communication devices was verified for ownership and location.
2. The server room was assessed for:
i) Accessibility violations.
ii) Security arrangements.
iii) Disaster management.
3. Email management system was thoroughly checked against active and inactive accounts, access levels and other improper behavior.
4. Scrap management policies were advised.
5. The Gate and Key management were not as per the standard operating procedures.
The audit process established that the facility was under threat from “Information Leakage”. Based on the findings the following recommendations were made to the facility management in order to avoid the criticalities of the system. They are:
1. Standard Operating Procedure Manual should be developed keeping in mind the different information needs and security levels requirements of different department.
2. Emails can be managed through advanced screening software.
3. Implementation of security measures like body searches, metal and other advanced detection facility.
4. Stress testing the system at regular intervals.
5. Finally as a first line of defense it important to continually educate the employee about the SOPs.
There are lessons to be learnt by other organizations. Leakage of confidential information can result into crucial damage to a business in its reputation, employee work culture and profitability. Before such an eventuality arises, it is necessary for businesses to adopt a multidimensional approach to Information System management.
Vivek Parti, CEO, India Business Database.com, Risk Management and Forensic Company
]]>Let us first take a look at how does the D&B program work? The program operates as a ’shared information network’ that gives that gives 24 hours online access to payment information on businesses. The trade participants have to provide their receivable information on a monthly basis. In return the trade partner receives free of charge data to reduce risk. Additionally D&B would provide Business reports, for a charge, that would incorporate trade payment data alongwith financial and operational information on the subject business.
This ‘shared information network’ is a private company initiative that does not have explicit regulatory approval in the form of licensing. Licensing is an important criterion in developing markets where any form of monopoly is shunned. But then…….how does it affect the trade participants? Well there could be positive and negative implications……there could be legal liabilities for masked sharing of ‘mutual’ information between trading parties but on the other hand a wider information base will support better credit decisions.
The Credit Information business environment in India can be a perfect example of a developing market that is maturing. In the current scenario, only regulated and licensed credit information entities, those that have been licensed by Reserve Bank of India (RBI) under the Credit Information Companies (Regulation) Act, 2005 are allowed to operate. Presently CIBIL is the only licensed and operating Credit Bureau in India. Last year RBI had called for applications for fresh licenses. Large Global players like Equifax Inc and Experian Ltd had applied in partnership with local financial institutions. Thus the credit information space will see lot of action in the coming months. The Credit Bureaus will collect and share information with specified members that are participants from the financial markets.
Under the licensing arrangements, Credit Bureaus are expected to carry out the following business:
(a) providing credit information to individual and corporate borrowers his/her/its own credit report;
(b) providing data management services to the Credit Institutions who are its members;
(c) collecting, processing, collating and disseminating data/information related to property mortgaged to credit institutions;
(d) collecting, processing, collating and disseminating data/information related to investments made in Securities other than those issued by Central Government; and
(e) any other function as notified by the Reserve Bank from time to time.
What do the Credit Bureaus do? Credit Bureaus collect information on borrowers from the member institutions, process the data on proprietary and advance risk management process and collectively store it for usage by member on demand. Typically the data collected would be on the account performance of the borrower. Account performance will include indicators like number of credit lines the borrower enjoys, current outstanding status of those credit lines, number of credit applications among other information. CIBIL is faced with several disputes on account of deviation and differences in the data on the credit reports. This is the case even when the underlying data comes from established data sources like the banking system.
Currently there are no established data privacy laws prevalent in India. Another tricky issue is that of data ownership. In the financial markets, financial institutions and other licensed entities that are governed by their respective regulatory authorities are prohibited from sharing personal data on customers with some exceptions (e.g. sharing with Credit Bureaus). But for other industries there is no clear law that allows sharing of trade information. In such a scenario, sharing of information without explicit approval from counter party will attract legal cases with civil liability even though proving the guilt will be an onerous task. But the possibility of legal cases will become a deterrent for the trade participants to share information with private networks.
How does the industry gather credit information? The trade finds its novel yet practical ways to address this function. Informal process of reference gathering from local trade players is the most prevalent option. Another way of getting information is through insiders like employees and other vendors. Competitors also form a good option to gather information. These methods are mostly disorganized, are loaded with an element of bias and are conducted in with least technical knowledge.
D&B’s Trade Exchange Program prima facie is an important move in the right direction. With trade payment information details the quality of Business Credit information will improve considerably. The quality of risk scores will improve. But there are some serious challenges that it will face.
1. The basic hesitation of private businesses to share information.
2. The credibility of the information that is being provided. It is common knowledge that Account Receivables seldom reconcile between trading partners.
3. Retribution by warring parties. The result would be that the credit report of one partner would deteriorate and that could harm its business prospects.
4. Payment delays could be on account of other differences such quality issues
5. There are legal issues in sharing mutual information. Account Receivable information is not proprietary to one party. Unless there are definite agreements in between trade partners that clearly spell the ownership of the data.
6. Additional cost in using business information reports.
“Building Databases @ ur cost“. Effectively D&B attempts to build databases at the cost of the Trade partners. The implied usage of data is in the Business Information reports that it primarily produces. On the other hand we have Credit Bureaus that are spending crores of rupees to gather data and on substantial license fees.
What is the alternative? Credible information from Credit Bureaus would be a good answer. But currently they have a limited scope of operation and are primarily focused in the financial markets.
The other option can be a central repository that stores all trade payment information. This would ensure the credibility and correctness of information that is stored. The information can be accessed by all licensed users for a minimal charge.
The third option will be of professional firms that provide specialised services in the Account Receivable management vertical. For example IBD’s AR management solutions. IBD is a professional services firm involved in risk management.
IBD’s AR management solution adopts proactive processes such as “Dynamic Credit Limit Setting” whereby the organization incorporates the system of ‘know your customer (KYC)’ and will set credit limits based on events. The advantage is that you gather current and credible information on your trade partners. More importantly you continue to respectthe trade relationship that your business has built and nurtured over years.
Vivek Parti, CEO, India Business Database.com, Risk Management and Forensic Company
]]>The good question is “Where is the money?”. Now before you go around looking for the ‘money‘ bear in mind what the credit bureaus are looking for while scoring your credit accounts:
Payment history weighs heavily in your credit score. Consistently paying your installments on time has a positive influence on the score. Collection accounts and bankruptcy filings are also taken into consideration when analyzing your payment history.
Total debt vis-a-vis total available credit. If your credit limits are maxed out, you will be considered a poor credit risk, because it appears that you are struggling to pay off the debt you have already incurred.
Length of positive credit history, where the longer you maintain accounts in good standing, the better your score will be.
Mix of types of credit and its maturity period has an impact on the credit scores.
The number of new credit applications recently completed has a bearing on the credit score. Applying for too much new credit in a short time period makes indicates that you could be credit risk, as you may be desperately trying to keep your head above water.
Additionally your neighbourhood friendly banker (who has now turned horrific!!) looks for Corporate Intelligence on your business. He is making sure that your current performance will not affect your future repayment capacity. Businesses with negative credit listings, such as delinquent accounts, must establish new positive credit lines to try to counterbalance the negative impact of their delinquent items.
Now the most important question of all “Where is the money?”. Well there are various sources for revenue generation. If you happen to be in the US and are part of the erstwhile blue chip corporations…having gone bust, then you have the US treasury that will infuse billions of tax payer’s money. If you happen to be in India and are part of the farmer community, then the government would show its largesse and waive your loans or if you happen to be the global flag bearer of any industry (Corporate Fraud or Financial misstatements not withstanding) you will be provided assistance to keep your business afloat.
Any other category, sorry….you need to brave it all by yourself. You chose to be an entrepreneurship over being a worker or a farmer. You are heavily outnumbered in the populist scheme of things.
Vivek Parti, CEO, India Business Database.com, Risk Management and Forensic Company
]]>Lets take India as a case point. The Indian business economy is well characterised by Micro, Small and Medium Enterprises (MSME). The sector provides employment to 42 million people and contributes 45% of total manufactured output and 40% of the total exports. The sector has consistently registered higher growth rates. But the policy makers are underestimating the collateral damage of global economic crisis on the MSME sector. To counetr the Global crisis, the government has provided two stimulus packages having thrust in fiscal measures and an additional plan expenditure of Rs. 200 billion. Along side the Central Bank has taken measures to pump liquidity into the system and assist MSME in meeting their immediate need.
On the face of it the stimulus provided has helped the financial sector but the real economy of Infrastructure and MSME are still lagging behind. The reasons are simple, firsty the institutional funds are bypassing majority of the small units and secondly, there is no ‘real’ demand. What is required is to provide greater purchasing power to a larger section of people by stepping up the public expenditure that is targetted specifically at the MSME sector. Similarly in the US, the government is providing bail out packages to the perpetrators of the great economic slide. But that wouldn’t stimulate demand.
As President Obama says “It’s about time…..It’s about change”. Governments needs to change too- their outlook….from Large Corporates to Small Enterprises. Thats the way forward.
We need voices in support of the SME segment that reach out to the policy makers and bring about this change.
Vivek Parti, CEO, India Business Database.com, Business Credit Information Company
]]>In all this mess, there are some blokes who have the sense of humour to make a joke of this ugly episode.
Chief Minister of Andhra Pradesh (the State in which Satyam ex-boss, Mr. Ramalinga Raju had political patronage), Mr Y S R Reddy went to a school. After have a brief talk with the children he asked them if they had any questions to ask him.
One boy raised his hand and stood up.
YSR: Whats your name?
Prakash: Prakash
YSR: Whats your question?
Prakash: Sir I have three questions.
1) Why did the Andhra Pradesh government provide so many land deals to Raju?
2) Where is the Rs.7000 crores?
3) For all the controversial situations, why does the ruling party alway blame the rival political party?
YSR: You are an intelligent student Prakash..(just then the bell rang for recess).
Oh dear students we will continue after the recess is over.
After the recess
YSR: Ok children where were we? Yes, so anybody wants to ask any question?
Suresh raises his hand
YSR:Whats your name?
Suresh: Suresh
Suresh: Sir I have 5 questions.
1) Why did Andhra Pradesh government provide so many land deals to Raju?
2) Where is the Rs.7000 crores?
3) For all the controversial situations, why does the ruling party blame the rival political party?
4) Why did recess bell ring 20 mins before the scheduled time, and
5) Where is Prakash?
The one question that needs to be answered is: While assessing a BUSINESS PARTNER for its Credit & Operational Risk, what elements would you consider in the following business functions?
I asked this question to various industry professionals and academicians, the responses were:
Demissew Ejara, Associate Professor of Finance at University of New Haven “I think the list contains appropriate variables to spot operational risk. For credit risk, you should look at financial conditions and character or more specifically the five C’s of credit.”
Brian McGuinness,Vice President at Business Lenders, LLC “I always start with the 5 C’s. After that look at industry risk & concentration of sales.”
The five C’s of credit are Character (Integrity), Capacity (Sufficient cash flow to service the obligation), Capital, Collateral (Assets) and Conditions (partner’s condition and the condition of the economy).
William Martin, Sales/Relationship Manager: NBFIs at JP Morgan PLC “You are looking at 2 different elements: credit and operational risk. Each has different constituent elements but as we are seeing in current markets, operational risk can impact on credit risk and force companies out of business. When looking at credit risk, I used to consider:
History: how long has the company been in existence? How has it grown? What changes have there been?
Management: Who? Experience? Length of time in position?
Product: What is it? What is the competition, demand?
Buyers: Who? How many? Bargaining power?
Suppliers: Who? How many? Bargaining power?
Terms of Trade: What are they? Have they changed?
Turnover/Revenues: How has this changed?
Margins: Rising/falling?
Debt/Ability to obtain credit: Can they do this? Who are their bankers? How much debt have they got out?
I would count goodwill as “reputation” – an intangible asset, but one that can mean almost more than the company put together (think of Coca Cola, for example – what value does its brand have?). Media contact – tricky. This is about managing perceptions and those who are good at it can reap great rewards. Operational Risk is the risk of loss arising through fraud, unauthorised activities, error, omission, inefficiency, systems failure or from external events. It is inherent to every business organisation and covers a wide spectrum of issues. Operational risk can arise from a number of causes, including but not limited to:
Fraudulent and other external criminal activities.
Breakdowns in processes and procedures due to human error, misjudgement or malice.
Terrorist attacks.
System failure or non-availability.
In certain parts of the world, vulnerability to natural disasters.
Failure of buyers/suppliers.
Regulatory events.
Political events.
In short, operational risk arises from people, processes, systems and external events. The trick is assessing the impact of an event happening and then its likelihood. this is more of an art than a science!! Different businesses will be subject to different risks in different countries (and even different parts of the same country if, for example, one part of the country is prone to flooding).
There were some who saw the funny side of the serious question, Mohit Mehta, Director at Investment Bank “If you are CEO of a leading business risk assessment company. Please tell us how you would do this?”
In my view, it is important to follow the 5 C’s but more important would be to implement a system of Corporate Intelligence in your work flow. A robust internal credit system coupled with an efficient Corporate Intelligence system would provide the desired response to a deteriorating credit position of the businesses.
Vivek Parti, CEO, India Business Database.com, Business Credit Information Company
]]>There are two questions that need to be answered:
1. After the corporate governance issues with the Maytas deal, why was Raju allowed so much time? Obviously there more top management people involved than just the Chairman (as he confesses)
2. What were the Auditors doing? Need to closely look at the various relationships that audit firms maintain with clients. That could result in compromising their position. Audit firms should only have one relationship…that is conducting audit. After Enron, Aurther Andersen was disbanded and sold off and the consulting arm became Accenture. All firms should delineate audit and consulting function in seperate entities.
All this proves that we need better corporate intelligence.
Vivek Parti, CEO, India Business Database.com, Business Credit Information Company
]]>The Government of India and Reserve Bank of India are trying to introduce changes that would address these maladies. These include:
1. Additional plan expenditure upto Rs. 200,000 mn. in the current year mainly for critical rural, infrastructure and social security schemes.
2. An across-the-board cut of 4% in ad-valorem Cenvat rate except for petroleum products.
3. Measures to support exports, housing, Micro, Small & Medium Enterprises (MSME) and textile sectors.
4. India Infrastructure Finance Company Ltd to raise Rs. 100,000 mn. to refinance bank lending for infrastructure projects.
5. Monetary, credit and fiscal Policy- External Commercial Borrowing (ECB):
(a) The ‘all-in-cost’ ceilings on such borrowing would be removed, under the approval route of Reserve Bank of India (RBI);
(b) To facilitate access to funds for the housing sector, the ‘development of integrated townships’ would be permitted as an eligible end-use of the ECB, under the approval route of RBI;
(c) NBFCs, dealing exclusively with infrastructure financing, would be permitted to access ECB from multilateral or bilateral financial institutions, under the approval route of RBI.
(d) In order to give a boost to the corporate bond market, FII investment limit in rupee denominated corporate bonds in India would be increased from US $ 6 bn to US $ 15 bn.
6. Credit flow to the economy:
(a) An SPV to provide liquidity support against investment grade paper to Non Banking Finance Companies (NBFCs) upto Rs.250,000 mn.
(b) An arrangement with leading Public Sector Banks to provide a line of credit to NBFCs specifically for purchase of commercial vehicles.
(c) Credit targets of Public Sector Banks are being revised upward.
(d) Guarantee cover under Credit Guarantee Scheme for micro and small enterprises on loans upto 85% for credit facility upto Rs. 0.5 mn. This will benefit about 84 per cent of the total number of accounts accorded guarantee cover.
7. State Governments will be allowed to raise in the current financial year additional market borrowings of 0.5% of their Gross State Domestic Product, amounting to about Rs 300,000 mn, for capital expenditures.
8. Exports:
(a) Taking into account the fact that the rupee has appreciated nearly four per cent against the dollar since November 2008, it has been decided to restore DEPB rates to those prevailing prior to November 2008. In order to provide predictability and stability of regime in the short term for future contracts, the DEPB Scheme would be extended till 31.12.2009.
(b) Duty drawback benefits on certain items.
(c) EXIM Bank has obtained from RBI a line of credit of Rs.50,000 mn and will provide pre-shipment and post-shipment credit, in rupees or dollars, to Indian exporters at competitive rates.
9. To counter recessionary trends:
(a) Exemptions from CVD on TMT bars and structurals, and from CVD and Special CVD on cement, which were given to contain inflation, are being withdrawn. Full exemption from basic customs duty on zinc and ferro alloys, which was also provided to contain inflation, is being similarly withdrawn.
(b) To release land for low income and middle income housing schemes.
(c) States will be provided assistance for the purchase of buses for their urban transport systems.
(d) Accelerated depreciation of 50% will be provided for commercial vehicles to be purchased on or after 1.1.2009 upto 31.03.09.
One area that the Government needs to look at very closely is the quality of credit that is being extended. In its enthusiasm they should not over extend and end up with another round of credit waivers in the near future (or is this the political far sightedness…who knows). This is a distinct possibility. The road to recovery is long since the global economies are still trying to figure out their bearings.
Vivek Parti, CEO, India Business Database.com, Business Credit Information Company
]]>The Central Banks of nearly all large economies have been shoring up the credit lines to their respective financial markets inorder to arrest the downward spiral. Their presumption has been that by providing liquidity to the markets they induce some immediate demand. The flip side of the argument has been that the investor confidence has been so badly shattered that it would take while before the dust settles.
Will the deficit financing of demand really stimulate growth in the sagging economies. Isn’t it really the same that was being done earlier. Cheap and unsecured credit to those who do not have the repayment capacity. The problem lies at repayment capacity of individuals and this should be addressed as a systematic change.
The world has reached a stage where redistribution of income has to take place. The poor and low income groups have to be provided with higher disposable incomes. This could happen through differential tax rates from the revenue point of view and the same could be redistributed by increasing salary levels (along with accountability levels), higher farm reserve prices, social security, etc. All in all, more money with more people. This would stimulate real growth.
Vivek Parti, CEO, http://www.indiabusinessdatabase.com, Business Credit Information Company
]]>Chetan Ahya, Managing Director of Morgan Stanley, feels economies will take more time to come out of the global recession. The recession, he said, will take long to get over, and can last for as much as two years. As real economy comes under pressure, we will see rise in non-performing loans, he said, adding that credit markets will recover only once the recession is closer to an end. Ahya added the current account deficit and strong credit growth compounds problems.
Ahya also said the issue of exchange rates remains a key challenge to emerging markets, adding that he sees rupee depreciating to lows of Rs 54-55 per dollar in five or six months.
Catch the entire interview on moneycontrol.com
]]>