|
Wipro reviewed the following aspects of security.
 |
Application
Security |
The client's set up consists of variety of applications
on different operating systems. Application types
include client server & web-based applications
and major operating system type includes Windows
NT/2000 and OS/400 operating systems.
Following are the types of applications deployed
at the client's site:
|
Application
for image scanning purposes [Ascent Capture
application] |
|
Application
for processing insurance claims [Colossus
Application] |
|
Application
for project management [Aldon CMS (Change
Management System)] |
|
Lotus Notes/Domino
application for GroupWare activities |
|
Content management
application [CM-400] etc |
The data handled by these applications and operating
systems is related to health insurance policies,
property insurance policies, guarantee policies
(Insurance on logical bonds like company contracts),
important postal documents converted in electronic
format, critical data transfer between Lotus Domino
and Notes Client, etc. Thus data flow between
various components is relatively critical data
and needs appropriate protection in order to achieve
appropriate level of security.
|
AS/400 Security: |
The client has their major claim handling application
and telemarketing application, which are customized
applications on AS/400 platform. The client was
interested in improving the overall security level
on OS/400.
|
Employee Security
Policy: |
Employee Security Policy plays an important role
in providing the guidelines on protocols to be followed
when dealing with the information assets provided
by the company. Hence the client was interested
in forming Industry standard employee security policy.
|
