However, our observation is that many a times, certain finer details such as configuration of devices, patch management, OEM supported software, password management or port management, are ignored or entirely left to the vendors resulting in an undesirable impact.
Statistics suggest that it takes on an average about 6 months to detect cyber-attacks by outsiders and longer in cases where attacks 2/5  BIS central bankers' speeches  are by insiders. Thus, early detection and response assumes significant importance. Banks need to build capabilities to detect cyber-attacks early and respond to them quickly.