Abstract

The case “Kotak Bank’s IT Crisis: From Failure to Resilience,” discusses how Ashok Vaswani (Vaswani), Managing Director and CEO of India-based banking and financial services company Kotak Mahindra Bank Limited (Kotak), managed the aftermath of an IT infrastructure failure that led to the country’s regulatory authority the Reserve Bank of India (RBI) imposing certain business restrictions on the bank. The case starts out with a brief overview of the technology initiatives and industry-first, customer-centric innovations which helped Kotak, the fourth-largest private bank in India; earn a reputation as one of the most technology-forward private sector banks in the country. With the rapid growth of digital transactions in India in the 2020s, Kotak began experiencing frequent IT-related failures and customer service disruptions. The disruptions were due to certain IT deficiencies and, to some extent, management oversight. The case documents the successive actions taken by the RBI against Kotak during that period and the reasons that led to the regulatory authority finally penalizing the bank in April 2024 by restricting onboarding of new customers via online/mobile banking and issuing fresh credit cards. The case then details the initiatives taken by Vaswani to assess the financial impact of the embargo, address the root causes of Kotak’s IT infrastructure failures, and implement subsequent investments to strengthen the bank’s IT systems and prevent similar incidents in the future. Eventually, in February 2025, Vaswani’s remedial actions satisfied the RBI, which lifted the restrictions. Having succeeded in his endeavor, Vaswani then focused on regaining Kotak’s lost market share in the credit card segment and began aggressively onboarding new customers through digital channels. So, has Vaswani done all that is possible to ensure that Kotak’s IT-related nightmare is truly over or is it too early to consider it business as usual for the bank?

Learning Objectives

The case is structured to achieve the following Learning Objectives:

• Understand the reasons for IT crises at banks
• Examine the role of the banking regulator in overseeing and mitigating IT-related failures
• Recognize the importance of a resilient IT infrastructure in a bank
• Analyze the skills required by a leader in managing a crisis
• Assess the IT upgrades that need to be done periodically at a bank

Keywords

Retail Banking; Differentiation; FinTech; IT Crisis; IT Investments; IT Upgrades; IT Governance; Core Banking Systems; Vendor Management; Regulatory Environment; Role of Regulator; Crisis Management; Leadership Skills; Business Continuity Management; Customer Relationship Management,Legacy systems; Security Risks; Digital Transactions; Supervisory Oversight; Corrective Actions; Systemic Learning; IT Resilience; Promoters; Customer Protection; Banking Regulations