Computer and Information Technology

Major Components of a Computer System

A computer system is a complete working unit that accepts data, processes it, stores it, and produces meaningful information. Its major components are broadly classified into hardware, software, data, peopleware (users), and procedures.

1. Hardware
Hardware refers to the physical, tangible parts of a computer that can be seen and touched. It includes:

• Input Unit: Devices such as keyboard, mouse, scanner and microphone that feed data and instructions into the system.
• Central Processing Unit (CPU): The “brain” of the computer, comprising the Arithmetic Logic Unit (ALU) for calculation and comparison, the Control Unit (CU) for directing operations, and registers for temporary storage.
• Memory Unit: Primary memory (RAM, ROM) holds data and programs currently in use; secondary memory (hard disk, SSD, pen drive) stores data permanently.
• Output Unit: Devices such as monitor, printer and speaker that present the processed result to the user.

2. Software
Software is the set of intangible programs and instructions that make the hardware work. It is of two types:

• System Software: Controls and manages the computer itself — operating system (Windows, Linux), utility programs, device drivers, and language translators (compiler, interpreter, assembler).
• Application Software: Performs user-oriented tasks — general packages like MS Word and Excel, and specific packages like payroll, accounting and banking software.

3. Data
Data is the raw, unprocessed facts and figures fed into the system. After processing, it becomes information, which is the ultimate output of a computer system.

4. Peopleware (Liveware/Users)
The human beings who operate, manage, design, and use the system — end users, programmers, system analysts, and IT administrators — form the peopleware component. Without them, the system cannot be used purposefully.

5. Procedures
Procedures are the set of rules, methods, steps, and documentation used to operate the computer system correctly. Examples include booting procedure, backup procedure, security policy, and user manuals. They ensure consistent and proper use of hardware, software, and data.

Conclusion
A computer system works effectively only when hardware, software, data, peopleware, and procedures function together. Hardware provides the physical framework, software supplies the instructions, data acts as the raw material, peopleware operates the system, and procedures guide its proper use.

Core Banking System (CBS) and Operational Efficiency

A Core Banking System is a centralized, branch-agnostic banking application in which all branches of a bank connect to a single central server and a common customer database. It replaces branch-level, stand-alone ledgers with one real-time database, so a transaction done at any branch or channel is instantly reflected across the whole network. This centralization is the main source of its efficiency gains.

How CBS improves operational efficiency

1. Single customer view and centralized database — One customer ID, one balance, one record. Duplication of accounts and passbooks is eliminated, and "know your customer" (KYC) data is available at every counter.
2. Anywhere / anytime banking — A customer can deposit in one branch and withdraw in another without inter-branch vouchers, inter-branch reconciliation or settlement delays. This removes a large volume of back-office work.
3. Automation of routine transactions — Interest calculation and posting, standing instructions, salary credits, ECS/debit instructions, cheque clearing entries and period-end closures are processed automatically, reducing manual effort and human error.
4. Straight-through processing and channel integration — CBS integrates with ATM, POS, mobile banking, internet banking, card management, remittance and payment switches (RTGS, connectIPS, IPS). A single posting updates all channels, so no separate reconciliation of channel transactions is needed.
5. Real-time MIS and reporting — Branch, product and customer-wise profitability, NPL, deposit mix, ALM and CRR/SLR positions are generated instantly. Regulatory returns to Nepal Rastra Bank and management reports are prepared faster and more accurately, improving decision-making.
6. Faster product innovation and scalability — New deposit and loan products can be launched through parameter setting rather than new software. The system scales with branch and customer growth without proportionate increase in staff.
7. Cost reduction — Lower manpower requirement per branch, less stationery and paper-based registers, reduced reconciliation and audit cost, and economies of scale in processing.
8. Better control and compliance — Maker–checker authorization, transaction limits, audit trails, AML/CFT screening and centralized account freezing give head office direct control over branches.
9. Improved customer service — Shorter turnaround time, 24/7 availability through alternate channels, and faster loan processing and statement generation.

Operational risks associated with CBS

1. System downtime and single point of failure — Server, database or network failure at the data centre can halt operations of the entire branch network; inadequate disaster recovery (DR) site worsens this.
2. Cyber and data security risk — Hacking, ransomware, phishing, card skimming, data leakage and unauthorized access to customer information.
3. Insider and fraud risk — Abuse of user IDs and passwords, ghost accounts, unauthorized electronic transfers, and weak segregation of duties.
4. Data integrity and migration risk — Errors while migrating from the legacy system, mismatched or duplicate records, and loss of historical data.
5. Vendor / third-party risk — Dependence on the software vendor for support, upgrades and patches; delayed updates, licensing disputes and vendor lock-in.
6. Change management and human risk — Inadequate staff training, wrong parameter setup (interest rates, charges, limits), key-person dependency and high staff turnover.
7. Processing and posting errors — Wrong debits/credits, incorrect interest application, failed reversals and incomplete end-of-day (EOD) runs.
8. Business continuity risk — Failure of backup power, communication links or DR drills, causing inability to serve customers during peak periods.
9. Compliance and regulatory risk — Inability to produce accurate regulatory returns, AML/CFT reporting gaps, and breach of NRB directives on IT security.
10. Audit trail risk — If logs and trails are not properly maintained, tracing fraudulent or erroneous transactions becomes difficult.

Conclusion: CBS substantially raises operational efficiency through centralization, automation and real-time information, but it converts branch-level risks into institution-wide risks. These must be managed through a robust DR site, strong access controls, regular backups, patch management, staff training and periodic IT audit.

Use of Internet and Intranet in Banking (2 marks)

Internet in banking: The internet connects a bank to its customers and to the outside world. Through internet banking (online banking), customers can check balances, transfer funds, pay bills, and apply for loans from anywhere at any time without visiting a branch. It also supports mobile banking, online payment gateways, ATM networking, and electronic fund transfers (RTGS, SWIFT, connectIPS). This reduces paperwork, saves time and cost, and expands the bank's reach beyond its physical branches.

Intranet in banking: An intranet is a private, secured network used only within the bank. It links head office, branches, and departments so that staff can share circulars, customer records, loan files, and internal reports quickly and securely. It supports internal e-mail, employee record keeping, fund transfer between branches, and management information systems. Because it is closed to outsiders, it keeps confidential banking data safe while improving internal communication and decision-making.

Importance of Database Management System (DBMS) in Banking (3 marks)

A DBMS is software that stores, organizes, retrieves, and controls a bank's data in a central database. Its importance in banking is as follows:

1. Centralized and accurate data: All customer details, account balances, deposits, loans, and transactions are kept in one organized database. Every branch sees the same updated information, so errors and duplication are avoided.

2. Fast data retrieval and service delivery: The DBMS can search and retrieve any customer's record within seconds using account number or name. This makes counter service, cheque clearing, and loan processing quick and efficient.

3. Data security and controlled access: The DBMS allows only authorized users to view or change data through passwords and access rights. Confidential financial information is protected from unauthorized access, theft, or misuse.

4. Data integrity and consistency: Rules and constraints in the DBMS ensure that entries such as account numbers are unique and that debit and credit amounts always match. This keeps the accounts balanced and reliable.

5. Reduced redundancy and easy sharing: The same data is stored once and shared by all departments (accounts, loans, cards, audit) instead of being repeated in separate files. This saves storage space and keeps records consistent.

6. Backup, recovery, and reporting: The DBMS supports regular backup and recovery so that data is not lost in case of system failure. It also generates reports such as daily transaction summaries, interest calculations, and statements for management decisions and regulatory reporting to Nepal Rastra Bank.

Conclusion: Internet and intranet together make banking fast, convenient, and well connected, while the DBMS provides the secure, accurate, and centralized data foundation on which the entire banking system depends.

Risks Associated with the Use of Information Technology in Banking Sector (2 marks)

1. Security risk: Unauthorised access, hacking, phishing, malware and ransomware attacks may steal or alter confidential customer and bank data.
2. Operational risk: System failure, hardware/software breakdown, network outage or power failure may interrupt banking services and cause transaction errors.
3. Data integrity and privacy risk: Loss, corruption or leakage of customer data violates privacy and damages customer confidence.
4. Fraud and cyber-crime risk: Insider fraud, card skimming, ATM fraud, identity theft and money laundering through electronic channels.
5. Compliance and legal risk: Failure to comply with Nepal Rastra Bank directives, IT security guidelines and anti-money laundering laws invites penalties and legal action.
6. Reputational risk: Any major cyber-incident or service disruption harms the bank's image and may cause loss of customers and deposits.
7. Strategic/third-party risk: Over-dependence on vendors, cloud service providers and outdated technology leads to obsolescence and service dependency.

Control Measures to Mitigate Those Risks (3 marks)

1. Strong access control: Use of unique user IDs, complex passwords, multi-factor authentication, biometric verification and role-based access rights with the principle of least privilege.
2. Data security and encryption: Encryption of data in transit and at rest, firewalls, intrusion detection/prevention systems, antivirus software and regular security patching.
3. Network and physical security: Segregated networks, VPN for remote access, secured data centres with restricted physical entry, CCTV and backup power supply.
4. Business continuity and disaster recovery: Regular data backup at off-site locations, tested disaster recovery plan, redundant servers and alternate processing site to ensure uninterrupted service.
5. Internal control and segregation of duties: Separation of duties among IT staff, maker–checker system, dual control for sensitive operations, audit trails and periodic reconciliation.
6. Continuous monitoring and audit: Real-time transaction monitoring, log review, internal and external IT audits, vulnerability assessment and penetration testing.
7. Fraud detection and incident response: Anti-fraud analytics, real-time alerts on unusual transactions, and a documented cyber incident response and reporting mechanism.
8. Human resource and awareness measures: Background verification of IT staff, training on cyber security, strong password policy and code of conduct.
9. Regulatory compliance and governance: Adherence to Nepal Rastra Bank IT guidelines, AML/CFT laws, formation of IT security committee and Board-level IT oversight.
10. Vendor and outsourcing management: Due diligence before selecting vendors, service level agreements (SLAs), periodic vendor audits and exit strategy.