Posted on Leave a comment

Microsoft’s confidential computing improves security for banks

Man looking at computerMan looking at computer

Air travel is a big part of my role at Microsoft. Being on planes for hours allows me to get a lot of work done without much interruption. One thing I always install before I touch my surface keyboard is the privacy screen. Unless someone is just about sitting in my seat with me, the work that I am crafting on the screen can only be seen by me. That physical privacy screen is a critical component for protecting me, Microsoft and ultimately our customers and partners.

Well in parallel, the digital “privacy screen” for Microsoft’s Azure Cloud platform includes the hardening of data access using methods such as encrypting data at rest when stored in blob storage, or in databases, etc. And encrypting the data in transit between datacenters, across machines and throughout the network. Even if customers don’t encrypt the data they provide to us, we encrypt it anyway.

Privacy must go even further

When I think about data at rest and data in transit, these data stages are only 2 of the 3 really important stages to find data in. The third stage is where Microsoft is using its engineering prowess to encrypt data that is in use during computation. Now why is that important to a banking business executive or technology executive?

Bottom line, safeguarding data is an increasingly complex endeavor in today’s banking world. External threats are more sophisticated, and customers are becoming increasingly vigilant on how their data is both stored and utilized.

Did you know?

Data fraud or theft are now two of the top five risks CEOs are most likely to face according to the latest World Economic Forum report on global risks. Almost 80 percent of organizations are introducing digitally fueled innovation faster than their ability to secure it against cyberattackers. When it comes to banks innovating by leveraging current on-premises infrastructure, the vulnerabilities exponentially increase.

Executing business models on top of secure data

The question is no longer “how secure is the public cloud”, but instead, “how comparatively secure are legacy systems?” Microsoft Azure shares the burden of compliance and security, offering expertise that can be hard to find in-house. As banks continue to digitally transform, they have aspirations to build the ultimate curated experience for customers by serving as the financial nucleus, dependent upon the accessibility and richness of relationship, personal, behavior and social data. The channels used to collect such data during in-person visits or online banking sessions like contact, demographic, geographic, and governmental data, can also include their third-party partners for use of cookies, web beacons or other technologies to collect and store other information about sites visited. Banks are partnering with third party software providers to leverage more sophisticated solutions and reduce the time-to-market for products and services. Security during computation is even more important when data is traversing from one third party to the next.

The bank is in full control of its data

That data collection and use by the bank is covered by Azure Confidential Computing – which uses a Trusted Execution Environment (TEE) or “enclaves,” increasing the security of application code and data, and offering cloud-based attestation that is simple and highly available through advanced security features, granular privacy controls, and cloud optimized specifically for financial services. Azure Confidential Computing helps to secure the bank’s data while it’s in use. Azure is the first cloud platform to protect the confidentiality and integrity of data while it’s processed in the cloud. It is the cornerstone of our ‘Confidential Cloud’ vision, which includes the following principles:

  • Mitigate top data breach threats
  • Customers are in complete control of their data whether it’s at rest, in transit or in compute
  • Code running in the cloud is protected and verifiable by the customer
  • Data and code are opaque to the cloud platform, or put another way the cloud platform is outside of the trusted computing base

What’s the bottom line?

Today, it is becoming increasingly important to understand the full information data supply chain in order to ensure adequate data protection – even while being analyzed. Azure Confidential Computing takes data security to the next level and protects data while it’s processed in the public cloud through the use of secure enclaves. This security capability provides the missing piece for full data protection at rest, in transit, and in use.

Check out Azure for banking and capital markets to learn more about cloud solutions that address the biggest challenges in financial services.

Posted on Leave a comment

Santander partners with Microsoft as a preferred strategic cloud provider to enable the bank’s digital transformation

Madrid (Spain) and Redmond (USA), April 29, 2019 – Banco Santander has partnered with Microsoft Corp. as a preferred strategic cloud provider to enable the bank’s digital transformation. Both companies announced today a multi-year global partnership that will help the bank drive its digital innovation and increase operational efficiency using a wide range of cloud solutions, including Microsoft Azure, Data, Artificial Intelligence and Cognitive Services.

Santander is transitioning its IT infrastructure towards a multi-cloud environment, with global platforms supported by agile methodologies, helping to accelerate the Group’s technological transformation.

Dirk Marzluf, head of Technology & Operations at Banco Santander, said: “We firmly believe that through successful, customer focused innovation we can earn greater loyalty by improving and personalising customers experiences, while also becoming more agile and efficient. Technology is a key enabler to the success of our business and Microsoft is a strong partner who will help us achieve our vision.”

Tom Keane, corporate vice president of Azure Global at Microsoft, said: “Our partnership with Santander comes at a transformative time for financial services, which is pivoting to digital quickly in response to industry-wide changes. We are looking forward to deepening our cloud engagement with Santander as the company continues to drive digital innovation across its global operations.”

Cloud as the lever to accelerate innovation
As part of the partnership, Microsoft will work with Santander to extend the bank’s cloud capabilities across its markets, driving the creation of cloud native applications and developing new and innovative banking solutions, while extending current applications with new intelligent capabilities. In addition, Microsoft will support the delivery of Azure training and certification programs to employees.

Microsoft Azure provides Santander with the agility, scale and intelligent technology required to bring new products to market quicker and address customer needs with higher flexibility through distribution channels and optimized internal operations.

Santander can leverage Microsoft’s ongoing commitment to security, compliance, privacy and transparency. Further, Microsoft’s Financial Services Compliance program – which allows banking firms and regulators to examine Microsoft cloud systems, services and processes – provides reassurance of Microsoft’s cloud operations compliance with regulatory requirements to enable Santander to gain the required flexibility to compete while preserving its customers’ privacy and trust.

About Santander
Banco Santander (SAN SM, STD US, BNC LN) is a leading retail and commercial bank, founded in 1857 and headquartered in Spain. It has a meaningful presence in 10 core markets in Europe and the Americas, and is the largest bank in the euro zone by market capitalization. At the end of 2018, Banco Santander had EUR 981 billion in customer funds (deposits and mutual funds), 144 million customers, 13,000 branches and 200,000 employees. Banco Santander made attributable profit of EUR 7,810 million in 2018, an increase of 18% compared to the previous year.

About Microsoft
Microsoft (Nasdaq “MSFT” @microsoft) enables digital transformation for the era of an intelligent cloud and an intelligent edge. Its mission is to empower every person and every organization on the planet to achieve more.

Download PDF 556 Kb
 

Posted on Leave a comment

Putting data and AI at the center of financial services transformation

The financial services industry is at an inflection point. Fintechs and challengers are entering rapidly as regulatory requirements are increasing. Consumers are expecting highly personalized experiences while security threats are evolving. The challenges for banks, insurers, payments tech providers and others are mounting high.

Transforming these challenges into business opportunities is an imperative for financial services firms and central to success. Many ambitious digital leaders are already discussing their transformation journey, or are well on the way. As a result, our teams are having new conversations, from ‘how can new cloud-enabled business models keep me competitive?’ to ‘help me optimize my data estate’ to ‘prove to me you’re a trusted partner who won’t undercut my business’.

At Microsoft, we’re at the intersection of these conversations in the financial services industry. We are laser-focused on building the best cloud for business, helping financial firms big and small enable intelligent industry transformation with data and artificial intelligence (AI). We’re doing so knowing that security, resiliency and regulatory compliance are vital, and we’re constantly thinking about how we can help institutions make the transition to modern innovations while still taking advantage of legacy investments.

With this in mind, I’d like to share Microsoft technology, partner solutions and industry contributions designed to help financial services businesses compete, innovate and succeed in the future. Here at Sibos 2018 in Sydney, Australia, and at the upcoming Money2020 in Las Vegas, Nevada, we will be on the ground showcasing this work and discussing how putting data and AI at the center of transformation is a formula for success.

New partnerships with the industry’s digital leaders

Building the leading cloud for financial services does not happen in a vacuum. We are proud to work side-by-side with transformational industry leaders who tell us the Microsoft business model aligns to their future. We are in the business of partnership and empowerment, not in the business of disintermediating financial services firms from their customers. This type of partnership is cleanly aligned to our company mission and something we stand by firmly.

Microsoft has announced a collaboration with SWIFT, the leader in secure financial messaging services. Together, we’re proving out a Microsoft Azure cloud-based solution for payments transfers conducted on the SWIFT network. Our intent is to enable the deployment of familiar SWIFT messaging solutions in the cloud, enabling faster, more cost effective, efficient and secure operations for banks, corporates and ecosystem technology providers.

Microsoft is also working with Interswitch, an impressive startup in West Africa. Interswitch is working with banks like GT and Zenith to bridge the supply chain financing gap between an existing corporate-focused infrastructure and a small entrepreneurial economy emerging in the region. Partnering with large banks and corporates in Nigeria, Interswitch has built a bank guarantee service on Azure that extends the reach of the banking system to non-traditional players, empowering bank lenders, corporate suppliers, and borrowers of all sizes to manage their supply-chain financing under objective terms and complete transparency.

New innovations for a data- and AI-powered future

The Microsoft Cloud – including Dynamics 365, Azure and Microsoft 365 – is already home to modern technology that industry-leading firms use to power their business today, including real-time payments infrastructure, seamless customer experience apps, risk management grids and fraud prevention tech. With more than $1 billion invested per year in security, a growing industry-leading data center footprint and an unmatched cloud regulatory compliance portfolio, we are fully vested in the financial services industry’s future.

Underscored by these investments, recent innovation across the Microsoft Cloud portfolio aims to make our platforms even more secure, efficient and intelligent, so together we unlock the power of data and AI for success.

  • Customer Lockbox for Microsoft Azure: Customer Lockbox for Microsoft Azure helps customers control and audit a Microsoft support engineer’s access to compute workloads on Azure that may contain customer data while resolving a support issue. Microsoft support does not have standing access to service operations. In some rare scenarios, to resolve a support issue, just-in-time access with limited and time bound authorization can be provided to Microsoft support engineers. Customer Lockbox helps ensure that Microsoft support engineers do not access customers’ content in the Azure portal without the customer’s explicit approval. It also helps improve the existing support ticket workflow by expediting the customer’s approval process. This capability enables customers to have more granular control, better visibility and enhanced audit over Microsoft’s support process.
  • Azure Confidential Computing: Azure Confidential Computing offers the possibility to keep data safe by isolating it while it is processed – a common method of data theft. Azure is the first cloud service to provide a secure platform for protecting the confidentiality and integrity of data in use using trusted execution environments (TEEs), and we’re rolling out a new family of virtual machines to ensure confidential computing is available to all Azure customers.
  • Microsoft Compliance Manager: Compliance Manager is a workflow-based risk assessment tool designed to help manage regulatory compliance within the shared responsibility model of the cloud. Compliance Manager provides a dashboard view of standards and regulations and assessments that enables organizations to track, assign and verify regulatory compliance activities related to Microsoft Professional Services and Microsoft cloud services, such as Microsoft Office 365, Microsoft Dynamics 365 and Microsoft Azure.
  • Microsoft Proposal Manager: Proposal Manager is a solution built on top of the Microsoft 365 platform that takes advantage of its advanced features and functions, together with custom apps, to deliver a streamlined corporate lending loan origination process. With Proposal Manager, corporate banks can easily streamline and automate the corporate lending process, create more effective proposals, and collaborate across the enterprise confidentially – all while taking advantage of the familiar, connected, accessible and intelligent experience in Microsoft 365.
  • AI in Excel: Excel is a powerful tool used by business leaders today. New AI-powered improvements in data handling and performance are making Excel even more valuable. New capabilities like Ideas, new data types, Insert Data from Picture and dynamics arrays are examples of how Microsoft is bringing AI into the tools business leaders use every day.

Bringing the leading ecosystem solutions to Microsoft platforms

The financial services technology landscape is an ecosystem of innovative players. Solution providers that are core to many financial institutions today are also enabling intelligent industry transformation with data and AI, and they’re choosing Microsoft platforms to power their technologies. These solutions are helping firms do things like grow retail banking business with next-best-action software, spot and fight financial crime with regtech, and improve customer relationships with multichannel customer experience solutions.

Today, our breadth of intelligent partner solutions is growing with new real-time payments infrastructure and blockchain-based trade finance tools, among existing tools for security, productivity and process optimization.

  • Volante: Volante’s well established VolPay Suite of payments processing products, today launched VolPay-as-a-Service on Azure with its first customer bank. The service provides banks with a managed service for end-to-end processing payments in the cloud, from capture through clearing. FIMBank Malta will be the first bank worldwide to deploy Volante’s Volpay-as-a-Service, an important step forward for cloud-based payments infrastructure.
  • TradeIX: TradeIXand R3 are working with 11 global banks to automate trade finance products under the Marco Polo initiative, which focuses on receivables discounting and payment commitments supported by blockchain-based software, Corda. For corporates looking to collateralize receivables, the process of submitting and financing invoices requires tremendous manual effort and reconciliation across counterparties. With Marco Polo and Microsoft Dynamics 365 Finance and Operations, corporates can automate and attest receivables in real time and banks can apply their rules and eligibility logic, providing all parties with an accurate view of present and future cash flow.

Meet us at Sibos and Money2020

It’s an exciting time to sit at the intersection of technology and financial services, and to think about what’s possible in the future. It’s humbling to be on this transformational journey with so many ambitious digital leaders. We welcome you to visit us at booth No. A30 if you’re in Sydney, or at our sessions at Money2020 in Las Vegas to meet our team.

Tags: , ,