Patch tuesday 5 Sep 2014

September 5th, 2014 by Stephen Jones No comments »

Internet Explorer needs another critical patch. If left unpatched, the browser is subject to attacks that execute malicious code on victim machines, so getting the updates to patch it is important.

In addition to the threat posed by the vulnerabilities that the patches correct, these critical browser updates will be challenging for IT organizations. Installing the updates requires system restarts and the browser in all its versions is widely distributed among organizations.

Vulnerable versions include IE 6, 7, 8, 9, 10, and 11 running on desktop Windows Vista, Windows 7 and Windows 8.1 as well as Windows Server 2003, 2008 and 2012.

The bulletin about the Internet Explorer problems is likely to include a roll-up of fixes for any number of vulnerabilities found over the past month

Microsoft Migration Accelerator for Azure

September 5th, 2014 by Stephen Jones No comments »

Microsoft recently acquired InMage, which has a hybrid cloud product to help migrate computing assets into, or back from, or in between, either public or private cloud infrastructures with ease,

It helps you also to replicate with a real-time sync with premise assets to leverage the cloud for: dev, test, analytics, and more; and helpesyou to recover and back up your physical and virtual assets ,whether on premise, or in the public/private cloud

Microsoft announced yesterday :

Spawned from the technology of Microsoft’s InMage acquisition announced July 11, the MA is designed to seamlessly migrate physical, VMware, AWS and Hyper-V workloads into Azure. It automates all aspects of migration including discovery of source workloads, remote agent installation, network adaptation and endpoint configuration. With MA, transitions into Azure can occur in mere minutes!

MA changes the cloud migration paradigm by offering:
Heterogeneity: With MA you can migrate workloads running on a broad range of platforms such as VMware, Microsoft Hyper-V, Amazon Web Services and/or Physical servers within your environment. MA can support workloads running on Windows Server 2008 R2 sp1, Windows Server 2012 and Windows Server 2012 R2 operating systems.
Simple, Automated Migration: The MA portal allows you to automatically discover your enterprise workloads, remotely from the cloud. With a few clicks, you can configure end-to-end migration scenarios. MA allows you to test your workload in the cloud without impacting the existing on-premise production workload, offering the ability to validate workload functionality before a cutover is performed.
Migrate Multi-tier Applications: MA boasts the unique ability to migrate a multi-tier production system with application level consistency, orchestrated across tiers. This ensures multi-tier applications run the same in Azure, as they ran at the source. Application startup order is even honored, without the need for any manual configuration.
Continuous Replication, Least Cutover Time: MA for Azure provides full-system replication including the OS and application data. This continuous replication and in-memory change tracking reduces the cutover time to mere minutes, minimizing impact to production workloads.

MA offers an unprecedented level of automation to provide seamless migrations of heterogeneous assets, into Azure.

Key Highlights:
Automated asset discovery and migration – MA portal orchestrates the discovery and migration of workloads from a single pane of glass.
Migration cutovers to Azure in minutes – continuous replication and in-memory change tracking significantly reduce cutover time.
Self-provisioned target Azure VM’s — Target VMs are dormant during synchronization saving compute cost and are then automatically provisioned during cutover.
Heterogeneous platform support – support for broad range of environments and platforms.
Continuous replication – lightweight agents on the source servers continuously replicate all changes to target ensuring near zero downtime during migrations.
Multi-tier application support – migrate your multi-tier production system with application level consistency orchestrated across tiers.
Target VM Network and Endpoint Adaptation – support for automated network adaptation and endpoint reconfiguration.
Integrated compression, encryption and bandwidth management.

Basel III and Islamic Banks -ask Synergy Software Systems

September 4th, 2014 by Stephen Jones No comments »

The tough Basel III regulatory standards, also pose questions for Islamic lenders that could prove expensive:
– Will regulators treat their deposit the same way?
– How will this affect banks with separate Islamic branches.?

Islamic finance frowns on monetary speculation, so their balance sheets are largely clear of the derivatives and complex, risky assets that surfaced in other banks during the global financial crisis. These factors were reported for example last month in http://gulfnews.com/business/banking/islamic-banks-to-benefit-form-basel-iii-capital-rules-1.1373655 However, the issues are wider than the balancde shet.

Interest payments are not allowed by sharia principles, so Islamic banks obtain deposits mostly through profit-sharing investment accounts (PSIAs), which are generally considered to be more volatile than conventional deposits. So Islamic banks are expected to be required to offset that volatility under Basel III by increasing the amount of high-quality liquid assets (HQLAs) that they hold.

This is easier said than done. Islamic securities markets are relatively immature , than conventional markets, so sharia-compliant HQLAs are in short supply –

Islamic commercial banks held about $1.2 trillion worth of assets at the end of last year, according to a study by Thomson Reuters. Those banks account for roughly a quarter of deposits in Gulf Arab countries and over a fifth in Malaysia.

Basel III requires banks to hold enough HQLAs to cover net cash outflows for a 30-day period under a high-stress scenario. Outflows are calculated by applying different weights to funding sources, including PSIAs. The riskier the funding source, the larger the amount of HQLAs needed to cover it.

With the exception of Malaysia and Bahrain, few central banks actively issue instruments which qualify as HQLAs.. Government-issued sukuk qualify, but most sovereign sukuk are either not listed on developed markets or are not actively traded, making those very hard for Islamic banks to obtain. This contrasts with conventional banks’ access to huge markets in high-quality government debt such as U.S. Treasuries and German Bunds. Alternatives such as the short-term sukuk issued by the Malaysia-based International Islamic Liquidity Management Corp, which was established to promote a cross-border market in Islamic instruments, remain small compared with the overall size of the industry..

Much depends on the weightage or “run-off rates” that national regulators who will implement Basel III in their own jurisdictions, choose to assign to PSIAs.

Regulators are keen to develop their Islamic banking sectors, so are unlikely to assign punitive weights. However, they may not be able to treat PSIAs as benignly as conventional bank deposits. For instance, PSIAs held by Islamic banks tend to have relatively short maturities..

The uncertainty looks unlikely to be cleared up at least before next year, when the Malaysia-based Islamic Financial Services Board (IFSB), a global standard-setting body, is expected to release a guidance note on the subject.

The note will deal with issues such as the contractual rights of depositors, for example whether they can withdraw money in fewer than 30 days without a significant penalty, said a source familiar with the IFSB’s deliberations.

Malaysia’s central bank has issued some guidance on PSIAs, saying it will classify them as two types: general PSIAs, broadly equivalent to conventional retail deposits, and specific or restricted PSIAs, deemed similar to managed investment accounts. It has given Islamic banks a two-year transition period to differentiate between those types. Yet while the central bank has already spelled out ratios and weights for Basel III capital adequacy rules, it has not yet announced run-off rates or HQLA requirements for PSIAs.

Basel III says national regulators around the world could assign run-off rates of 3 per cent or higher to stable, conventional bank deposits, and as much as 10 per cent to less stable deposits, according to S&P. Islamic banks may end up being assigned numbers within that range; given the size of the deposits at stake, a variation of several percentage points will make a big difference to how much HQLAs the banks are forced to hold.

The PSIA issue may increase pressure on central banks and governments to address longstanding problems in Islamic finance.

As part of its efforts to develop as an Islamic financial centre, Dubai is actively trying to list sukuk on its exchanges and encouraging its state-linked firms to issue trade-able sukuks, but it may be years before supply begins to meet demand.

Another problem is deposit insurance. For bank deposits to be deemed stable they need to be protected by an insurance scheme, but sharia-compliant schemes are rare, partly because government support for domestic banks is considered implicit in many Gulf countries.

Bahrain introduced Islamic deposit insurance in 1993.

In May this year, Qatar said it would develop an Islamic deposit insurance scheme.

In June, Bangladesh said Islamic deposits would be covered under an existing scheme managed by the central bank.

The first sukuk to have claimed to be in compliance with Basel III requirements was issued in November 2012 by Abu Dhabi Islamic Bank (ADIB). The issuance was worth USD1bln and classified as AT1 capital requirements. This issuance generated an overwhelming response with an order book of USD15.5bln (more than 30 times over-subscribed on the initial benchmark size), and carries
a profit rate of 6.375%, the lowest ever coupon for an instrument of this type. This supports proposition that sukuk issuers have an opportunity to tap into the Basel III-compliant sukuk market.

The Islamic Financial Services Board (IFSB) released draft guidelines on capital adequacy for Islamic banks in November 2012 which clarifies the use of sukuk as additional capital. As per the IFSB Exposure Draft 15, sukuk issued against assets owned by an Islamic bank may be used by that bank as additional capital to meet regulatory minimum requirements. The minimum maturity of the sukuk is five years and it should not have step-up features, such as periodic increases in the rate of return, giving an incentive for the issuer to redeem it.

Over the past two years three UAE based Islamic banks such as Abu Dhabi Islamic Bank, Dubai Islamic Bank and Al Hilal Bank have opted for Tier 1 sukuk issuance totalling $2.5 billion. Issuers of these sukuk say that they qualify as Additional Tier 1 (AT1) capital under Basel III.

The ADIB USD1bln sukuk was based on the contract of Mudharabah and is classified as equity, which therefore does not include principal loss absorption or equity conversion features. Periodic distributions are fully discretionary and non-cumulative. The sukuk is unrated, but will be included in Fitch-eligible capital with a 50% equity credit. It has no maturity date while ADIB can choose to repay the sukuk on certain dates from 2018 if it wishes.

This has significant implications in particular for regional banks that deal with both conventional and Islamic finance. They will have to establish processes to ensure
that the two sets of rules are implemented across two divisions simultaneously. For those banks already specialising in either conventional or Islamic finance,
the impact is no less significant. They will have to comply with new regulatory measures around their liquidity ratios. They will also have to implement strategies for stress testing that allow for complex data to be analysed in order to demonstrate compliance with the Relevant Central Bank’ Basel III directives.

These requirements call for considerable technology change at many banks to ensure that the required financial and risk data can be accurately gathered, cleansed, analysed and reported to board members and the regulator in the
formats required.

Meeting the regulations as they are currently shaped, for Basel III is not a one-time compliance exercise. The requirements will evolve and banks will benefit from taking a long-term view of regulatory compliance. This means developing a framework for implementing consistent compliance practices and implementing a regulatory reporting framework with in-built enterprise-wide risk management tools to ensure ongoing compliance.

Faster web with new html element for images

September 3rd, 2014 by Stephen Jones No comments »

The Web will get much faster very soon.

A current problem is images. – the size of the average page in the top 1,000 sites on the Web is 1.7MB. and Images account for almost 1MB of that 1.7MB.

With a fast fiber connection, that no problem but on a mobile network, that huge image uses up limited bandwidth. When you’re using a mobile device is you still get images intended for pc monitors loaded . It’s a waste of bandwidth delivering pixels you don’t need.

Modern Web browsers speed up page load times by downloading images before parsing the page’s body. The browser starts to download the image before it knows where that image will be in the page layout or how big it will need to be.

As of today, the Picture element will be available in Chrome and Firefox by the end of the year. It’s available now in Chrome’s dev channel and Firefox 34+ (in Firefox you’ll need to enable it in about:config). Here’s a test page showing the new Picture element in action.

Lawson of Opera first suggested that a new html element might be in order. The breakthrough for Picture came from Opera’s Simon Pieters and Google’s Tab Atkins. They made a simple, suggestion—make Picture a wrapper for img. That way there are not two separate elements for images on the Web (which is confusing), but there would still be a new way to control which image the browser displays.

After evaluating the various rules, the browser picks the best image based on its own criteria. This is anice feature because the browser’s criteria can include your settings. Future browsers might offer an option to stop high-res images from loading over 3G, regardless of any Picture element on the page . Once the browser knows which image is the best choice, it loads and displays that image in a n img element. Prefetching still works and there’s no performance penalty. When the browser doesn’t understand picture, it falls back to whatever is in the img tag.

So Picture wraps an img tag. If the browser is too old to know what to make of a element, then it loads the fallback img tag. All the accessibility benefits remain since the alt attribute is still on the img element.

Opera, also based on Blink, will support Picture in the near future. Apple appears to be adding support to Safari through the backport to WebKit, though it wasn’t finished in time for the upcoming Safari 8. Microsoft has likewise been supportive and is considering Picture for the next release of IE.

Azure cuts prices from 1 Nov 2014

August 30th, 2014 by Stephen Jones No comments »

In April, Microsoft introduces some new service tiers and phased out some.

This week, announced some price reductions and improved service level availability. The changes are just ahead of general availability of the new tiers in September. Microsoft is cutting prices on the Azure SQL Premium and Standard tiers by 50 percent from previously published pricing.

Basic tier pricing will remain the same as previously published.

Microsoft also is moving Azure SQL Database to hourly billing for the new service tiers, according to a blog post last week about the new changes.

Microsoft will add a new s0 (s-zero) performance level in the Standard service tier as a lower-cost entry point for Standard. The 99.95 percent availability in its service level agreements (SLAs) for the new tiers, will be increased to providing 99.99 percent availability, Microsoft officials said.

The current Web and Business service tiers will be retired in April 2015.

Fo more information on prices see www.microsoft.com/blog/2014/08/26/new-azure-sql-database-service-tiers-generally-available-in-september-with-reduced-pricing-and-enhanced-sla/

DIFC Authority CEO resigns

August 24th, 2014 by Stephen Jones No comments »

Jeffrey Singer said on Wednesday that he had resigned as chief executive of the DIFC Authority, which oversees Dubai’s financial free zone, the Dubai International Financial Centre. The resignation is with immediate effect, Singer said. He declined to comment further. Two financial industry sources said the resignation was for personal reasons and that DIFC Gov. Essa Kazim would continue to oversee the zone’s operations while a replacement for Singer was found. Singer was appointed CEO in July 2012, after four years as CEO of the Nasdaq Dubai bourse, the smaller of the emirate’s two stock markets. Before that, he was a senior executive at NASDAQ OMX Group, handling that company’s international development

Founded in 2004, the DIFC his now the Middle East’s top banking center. The number of active registered companies operating within it rose 14 percent to 1,039 last year.

Basel 111 – and money laundering

August 24th, 2014 by Stephen Jones No comments »

Basel III is proceeding globally, with tangible differences evident between jurisdictions such as pace of adoption, the degrees of strict compliance to the Basel Committee guidance, and the resulting technical infrastructure challenges banks face. Some countries in the Middle East have accelerated
capital deduction phase-in periods or changed limited deductions to
full deductions.

Basel III largely focuses on the liability side of the balance sheet, and modifies requirements for both the quantity and the quality of loss-absorbing capital.

There new requirements for a leverage ratio, and for liquidity and stable funding requirements (a short-term 30-day liquidity coverage ratio and a 1-year
net stable funding ratio). Basel III requires more high-quality common equity Tier 1 (CET1) capital relative to total Tier 1 and Tier 2 capital, and adds a number of capital buffers which can only be met with CET1 capital. These buffers are above regulatory minimums that range from an additional 2.5% of risk-weighted assets up to 8.5%, and even higher in some regions. Basel III recommends an additional loss-absorbing buffer for global and domestic systemically important banks, which can range up to 3.5% – and depend on a bank’s cross-jurisdictional activity (only for G-SIBs), size, interconnectedness, substitutability, and complexity.

In the EU the Capital Requirements Directive (CRD IV) which relates to Basel
III creates an additional buffer known as a systemic risk buffer, which is applied to the whole financial sector, and subsets of it, to prevent and to mitigate long-term non-cyclical systemic and macro-prudential risks. EU member states can apply systemic risk buffers of 1% – 3% for all exposures, and up to 5% for domestic exposures, without having to seek prior approval from the European Commission. 6 For banks subject to both a systemically important bank buffer and the
systemic risk buffer, the higher of the two will apply, but if the systemic risk buffer applies to domestic exposures only, they will be combined. Expect similar legislation to follow in this region at some point in the not too distant future.

The Basel III framework includes revisions to risk-weighted assets (RWAs) related to counterparty credit risk, including the treatment of “wrong-way” risk.

Globally,jurisdictions look to be implementing the minimum capital
requirements according to the BCBS schedule (by 2015) or even more
rapidly, with a faster phase-in for some of the largest banks. Many regions will adopt the BCBS phase-in schedule (which begins in 2016), but some Middle Eastern countries may require faster compliance.

The Islamic Financial Services Board’s (IFSB) revised capital requirements for Bassel III could help strengthen the Islamic finance industry, according to a recent Standard & Poor’s Ratings Services report. The report titled ‘Basel III Offers An Opportunity For Islamic Banks To Strengthen Their Capitalization And Liquidity Management,” sets out how Islamic banks will implement Basel III.

A liquidity coverage ratio might address some of the industry’s long-standing weaknesses, particularly the lack of high quality liquid assets (HQLA), said the report. The implementation of Basel III will also test the treatment of profit sharing investment accounts (PSIAs) from liquidity and funding perspective.
PSIA holders are, in theory, obliged to share any losses, but this could increase their volatility and liquidity coverage requirements and reduce their role as stable funding sources, The IFSB is likely to release its guidance note on the parameters and calculation of the liquidity coverage ratio and net stable funding ratio in early 2015.

The $300 million settlement between Standard Chartered (SC) and the New York Department of Financial Services (DFS), announced on 19 August, again highlights operational and regulatory risks for the bank, says Fitch Ratings.
The New York Department of Financial Services (DFS) said the British bank’s internal compliance systems had failed to detect or act on a large number of “potentially high-risk transactions” mostly originating from Hong Kong and the United Arab Emirates. Banking group Standard Chartered is liable to legal action in the UAE after it agreed to close some customers’ UAE accounts in an anti-money laundering settlement with US regulators, the UAE central bank said “because of the material and moral damage which is falling on them”
‘The new punishment came two years after the bank paid US regulators US$667 million to settle charges it violated US sanctions by handling thousands of money transactions involving Iran, Myanmar, Libya and Sudan.

In 2011 Dubai-based Noor Islamic Bank, since re-named Noor Bank, halted a business in which it channelled billions of dollars from Iranian oil sales through its accounts, as Washington stepped up sanctions over Iran’s disputed nuclear plans.

In May last year, the UAE revoked the licences of two local money exchange companies for non-compliance with regulations including rules against money laundering.

Last month The Basel Committee on Banking Supervision last week proposed standards on money laundering risks, which require banks to include AML within their firm-wide risk management process. “Basel’s commitment to AML is fully aligned with its mandate to strengthen the regulation, supervision and practices of banks worldwide, with the purpose of enhancing financial stability,” the committee stated on issuing the proposal for consultation.

AML is a new area for Basel, which usually deals with prudential standards such as the Basel III capital rules. Its efforts are in addition to those of the Financial Action Task Force (FATF), which issued global AML standards in 2012 and a flurry of practice guidelines last week. Basel supports individual country implementation of FATF standards, and views their proposed standards as supplemental to these, including cross-references back to these in its text.

In Iraq last year political and economic Iraqi circles confirmed the presence of extensive money-laundering operations. Weak monitoring systems and political conflicts of interest, were reasons advanced that prevented the exposure of these operations. Ahmad al-Jabouri, a member of the Integrity Committee in the Iraqi parliament, said in a statement that the amount of money subject to laundering operations are around “20% of Iraq’s investment budget.” Iraq’s 2013 general budget is more than $115 billion, $46 billion of which are investment expenditures. According to Jabouri, money-laundering operations make up $9 billion per year

Synergy Software Systems, Abu Dhabi

August 23rd, 2014 by Stephen Jones No comments »

We have always supported clients across the Middle East from our U.A.E. base.

To better support our continually growing client base in Abu Dhabi last month we opened an office there in the city centre.

Sunsystems Training at Synergy Software Systems main offices in Dubai

August 23rd, 2014 by Stephen Jones No comments »

Synergy’s specialist SunSystems team of consultants are providing a 10 day advanced training course in the latest 6.1 version of SunSystems, for Ultimate, a Sunsystems ‘partner from Kenya.

Basel III in Oman

August 18th, 2014 by Stephen Jones No comments »

Oman is not yet one of the 27 national members of the BCBS.

However, the CBO has called upon Omani banks to comply with Basel III standards and issued guidelines on how to implement compliance to this standard which started phasing in from January 2013 and will continue until December 2018,- i.e.in line with the global timeline set out in Basel III for the implementation of its reforms.

Will Basel III work in Oman, particularly with regards to Islamic financing? It seems so! HE Hamood Sangour Al-Zadjali, Executive President of the CBO, in an interview for the Oman Economic Review in April 2014, discussed Oman’s compliance with international best banking practices and stated:

“We have prescribed minimum regulatory capital for banks at 12 per cent of risk-weighted assets, much higher than that prescribed by the Basel norms. Moreover, the actual capital adequacy ratio is much higher at around 16 per cent. The CBO is well ahead in the implementation of Basel III framework, issued in November 2013. Some of the main features of these final guidelines prescribed by the CBO include: minimum common equity tier 1 ratio has been prescribed at seven per cent of risk weighted assets, while minimum Tier 1 capital ratio has been prescribed at nine per cent of risk weighted assets and the minimum total capital adequacy ratio has been prescribed at 12 per cent of risk weighted assets. All these norms … are in line with the international best practices prescribed by the Basel III.”