KT Transition Plan

Download as xlsx, pdf, or txt
Download as xlsx, pdf, or txt
You are on page 1of 6

Serial # Course Topic / Training Topics

1 Overview of CDS Change process - GCR and PACR

2 GRC Configuration/Refresh

3 Estimator tool and Process

4 SNOW updates and checkpoints

5 CIA and High level analysis

6 SBS and Detail design

7 Risk Analysis

8 SOD rule set and config

9 HP Quality Centre - Testing Sccoping, Planning, test scenarios


10 KPIs and SPIs for all GCRs and PACR

11 Transport creation and Charm Process


12 CAB reviews and checks

13 Different type of releases and its execution

14 Peer review process

15 PACR analysis,creation and execution


16 Technical build and checks

17 Shawdow /Handhold Swapnil


Details

1.Different type of PACRs and GCRs.


2.What type of changes qualify as GCR and PACR.
3.GCRs :Approval process and its execution from design to deploy

1. Document shared for all steps to complete GRC config, recent GS3 was refreshed from GP3 for
Oct/Ehp7 shakedown.
2. GS3 refresh restoration was done with screenshare so that Swapnil could see all steps performed.

1. Basic overview on different types of security requests we get and its estimation and tagging in tool
2.Estimator tool usage and updates during CIA analysis
3.Swapnil has already started using this tool for April estimation

1.Various task, functional impact sections on SNOW tool used by GSDS


2. Usage of SNOW tool during high level estimation with CIA updates
3. Usage of SNOW tool during details design phase and updation on tasks

1. Anlayzing CIA and understanding security requirements


2.In case of query to contact functional team for clarification to understand impact
3. Sample requests shared to perform initial analysis

1. Understanding SBS and its usage for different section


2.Updating mandatory sections in SBS from security end
3.Peforming risk analysis and SOD checks
4.updating estimates and ACR imapcts

1.Importance of Risk anslysis in Security


2. ARA to be done at critical action, critical permission and permission level
3.Simulation run for risk analysis

1. Overview of ruleset, bussiess process, functions and rules in GRC system


2.Updation of GRC functions and its steps in system
3. Mitigation controls always created in PC and then flows back to AC
4. All GRC SOD,Rule set, function changes to be transportable only

1.Usage of HP QC
2.Understing testing scope and scenrios with functional team to ensure all impacted GJGs/roles are
tested
1. Overview on KPIs and SPIs in GCR and PACR process

1.Usage of SolMan for all Transport creation process


2.Swapnil is already aware of this and have been using it for Bug Fix in AMO
3.Additonal check point is to use different projects for different releases
1.Technical build, ACRs, ARA, Role comaparion, UT,UAT to be checked for CAB review
1. Monthly and bi yearly drops
2.Each release has release manager who handles this until deployment
1.New peer review checklist is being created to perform all checks during build.
2. Additonal pointers provided by AMO(Swapnil) are also included in the checklist
1. PACR analysis and planning based on scope of work
1. Performing pre and post role comaprision
2.Performing pre and post ARA
3. Post build ensure profiles are generated and included with derived roles if any in TR request
Week 1 - Handhold all the task performed by Swapnil
Week 2 - Shadow the task being done by Swapnil
Training Duration (Hrs.) Status Start Date End Date

2
Completed 26-Oct-15 26-Oct-15

Completed 26-Oct-15 26-Oct-15

Completed 27-Oct-15 27-Oct-15

2
Completed 27-Oct-15 27-Oct-15

2
Completed 28-Oct-15 28-Oct-15

Completed 29-Oct-15 29-Oct-15

2
Completed 29-Oct-15 29-Oct-15

Pending 9-Nov-15 9-Nov-15

2
Completed 30-Oct-15 30-Oct-15
2 Pending 10-Nov-15 10-Nov-15

2
Completed 2-Nov-15 2-Nov-15
2 Pending

2
Completed 3-Nov-15 3-Nov-15
2
Completed 4-Nov-15 4-Nov-15
2
Completed 5-Nov-15 5-Nov-15
1

Completed 5-Nov-15 5-Nov-15


2 weeks
Pending 23-Nov-15 7-Dec-15

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy