Section 20C in State Bank of India General Regulations, 1955
20C. Safe guards for protection of Computer System.
(1)The access to the system set out in Regulation 20B in which data is stored shall be restricted to such persons as may be authorised in this behalf by the Chairman or [managing director authorised by the chairman] [Substituted 'managing director' by the State Bank of India General (Amendment) Regulations, 2013(Regulation 10), with effect from 3rd March, 2014, published in the Gazette of India, Extraordinary, Part II. - Section 4, dated 04.03.2014.] or the designated official and the passwords if any, and/or the electronic security control systems shall be kept confidential under the custody of the said persons.(2)The access by the authorised persons shall be recorded in logs by the computer system and such logs shall be preserved with the officials/persons designated in this behalf by the Chairman or [managing director authorised by the chairman] [Substituted 'managing director' by the State Bank of India General (Amendment) Regulations, 2013, with effect from 3rd March, 2014 (Regulation 10), published in the Gazette of India, Extraordinary, Part II. - Section 4, dated 04.03.2014.] or the designated official.(3)Copies of the back-ups shall be taken on removable media at intervals as may be specified from time to time by the Chairman or the [managing director authorised by the chairman] [Substituted 'managing director' by the State Bank of India General (Amendment) Regulations, 2013, with effect from 3rd March, 2014 (Regulation 10), published in the Gazette of India, Extraordinary, Part II. - Section 4, dated 04.03.2014.] or the designated official, incorporating the changes made in the register of shareholders. At least one of these copies should be stored in a location other than the premises in which a processing is being done. This copy should be stored in a fire-proof environment with locking arrangement and at the requisite temperature. The access to the back-ups in both the locations shall be restricted to persons authorised in this behalf by the Chairman or [managing director authorised by the chairman] [Substituted 'managing director' by the State Bank of India General (Amendment) Regulations, 2013, with effect from 3rd March, 2014 (Regulation 10), published in the Gazette of India, Extraordinary, Part II. - Section 4, dated 04.03.2014.] or the designated official. The persons so authorised shall record the access in a manual register kept at the location.(4)It shall be the duty of the authorised persons to compare the data on the back-up with that on the Computer System by using appropriate software to ensure correctness of the back-up. The result of this operation shall be recorded in the register maintained for the purpose.
