Customer :
A Technology Operations Support Services Company.
Business Requirement :
One of the Telecom outsourcer was looking to get ISAE 3402 certified with respect to both basic compliance and implementation and the entire road path of 6 months this included both control testing and document validation. They had to comply with key 68 process areas and have to align documentation in major 15 categories for which SOC control templates were not available.
Identified Process Challenges :
Having a team skilled across multiple technologies.
Missing or incomplete documentation on the legacy applications.
Multiple templates tools and absence of basic hygiene on policies and procedures.
Frequently varying scope, requirements, and timelines.
No SME for Policy and procedure structure for SOC1 and SOC 2 reviews. No proper evidence captured across key areas.
Tech configuration of firewall, maintaining security across remote and onsite options.
Approach and Solution Design :
Compliance to ISAE 3402 SOC specifications.
Timely closure of requirements.
Automation of policy and content management up to transaction level.
One-time onboarding and contract management through the system enabled for $800 million worth contracts.
Business Benefit and Result :
The key objectives of this engagement would be to perform critical employee details validations across regions:
