Test: RCSA CTI EMEA STORAGE 23 Objective Of Self Test: Provide a sample of reports or inventories sent to SA team Provide a list of authorized HP engineers that are allowed to access WRDC Test Procedure: Provide a sample of reports or inventories sent to SA team Provide a list of authorized HP engineers that are allowed to access WRDC Test: RCSA CTI EMEA STORAGE 29 Objective Of Self Test: - Test Procedure: Provide a sample of meeting minutes from sample period confirming that capacity forecasting is being discussed and that all required parties were present Provide evidence of database screenshot or report Provide evidence of latest capacity request made Test: RCSA CTI EMEA STORAGE 31 Objective Of Self Test: Provide details on agreed fix times Provide evidence that fix times were not breached for a sample of problems remediated by the vendor Provide a sample of meeting minutes from the testing period Test Procedure: Provide details on agreed fix times Provide evidence that fix times were not breached for a sample of problems remediated by the vendor Provide a sample of meeting minutes from the testing period Test: RCSA CTI EMEA STORAGE 42 Objective Of Self Test: 1. A sample of audit log emails which are received on a daily basis. Test Procedure: 1. A sample of audit log emails which are received on a daily basis. test population/rationale - a daily basis an email is created containing entries from the audit logs of the EMEA NAS environment, currently totaling 90 devices. If any days are missed due to script errors, these can be run on an ad-hoc basis. Sample Size Rationale*: Picked one email for each week of the period. Test Result Findings and Conclusions*: - An email for each day of the period has been created detailing the audit log events that need to be reviewed. Test: RCSA CTI EMEA STORAGE 43 Objective Of Self Test: 1. Confirmation email from the external review team. Test Procedure: 1. Confirmation email from the external review team. test population/rationale - For each audit log email created, the external review team reviews the logs and confirms all events have been justified. Sample Size Rationale*: Picked the relating review emails, for the each of the emails provided in the sample for confirming the audit log email had been sent. Test Result Findings and Conclusions*: - All audit log emails sent for review, have been reviewed by the external team and confirmed there are no events to justify. Test: RCSA CTI EMEA STORAGE 48 Objective Of Self Test: Provide EMS report detailing breakdown of EMS tickets raised that require PIT input Attach minutes of Storage BAU team meeting confirming that resolution of problems is on the agenda Test Procedure: Provide EMS report detailing breakdown of EMS tickets raised that require PIT input Attach minutes of Storage BAU team meeting confirming that resolution of problems is on the agenda Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: Check EMS system for entries related to manager 'Alistair Grant' and Impacted Category of 'Tech Infrastructure' to check for tickets raised against SPIT team during testing period.Required Sample Size Rationale*: All tickets brought up by the search are checked to see if they are related the SPIT team.Required Test Result Findings and Conclusions*: 12 tickets were found but none of them were related to the Storage Projects team. Test: RCSA CTI EMEA STORAGE 51 Objective Of Self Test: Provide a sample of agendas and minutes from vendor meeting that have taken place during the testing period. The agenda and minutes should show that all upgrades, capacity and EOL issues are being discussed Test Procedure: Provide a sample of agendas and minutes from vendor meeting that have taken place during the testing period. The agenda and minutes should show that all upgrades, capacity and EOL issues are being discussed Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: A sample of vendor meeting minutes taken during the test period are attached detailing upgrades, capacity and EOL issues being discussed.Required Sample Size Rationale*: A sample of the regular meeting minutes have been attached. Test Result Findings and Conclusions*: One sample meeting minute for each month of the testing period is supplied from each vendor. These minutes detail and show discussion of upgrades, capacity and EOL issues. Test: RCSA CTI EMEA STORAGE 50 Objective Of Self Test: Provide evidence that there has been a review of the GDSE standards and that work has began to ensure that all systems are compliant with any changes to the standards during the testing period One Info tickets should be available to cover this work Test Procedure: Provide evidence that there has been a review of the GDSE standards and that work has began to ensure that all systems are compliant with any changes to the standards during the testing period One Info tickets should be available to cover this work Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: All the GDSE releases are discussed as part of the weekyl SPIT team meeting. Any releases that require implementation are assigned to a member of the SPIT team, who raise the required change control, and implement the change.Required sample Size Rationale*: A Sample of the SPIT team minutes are enclosed in the details showing that the releases are discussed. All the changes raised are detailed in the evidence, none of them are related to GDSE recommended installs. Test Result Findings and Conclusions*: All the GDSE releases are discussed in the weekly meetings. Those that need to be installed are assigned to a SA. No GDSE releases were required or performed over the testing period. ==================== Test: RCSA CTI EMEA STORAGE 31 Objective Of Self Test: Provide details on agreed fix times Provide evidence that fix times were not breached for a sample of problems remediated by the vendor Provide a sample of meeting minutes from the testing period Test Procedure: Provide details on agreed fix times Provide evidence that fix times were not breached for a sample of problems remediated by the vendor Provide a sample of meeting minutes from the testing period Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: sample meeting minute for each month of the testing period is supplied from the vendor. These minutes detail and discussion of upgrades, hardware issues & Fixes . And also provided the Citigroup_Master_Software_Lic and support_Agreement & Citigroup Master Purchase and Maintenance AgreementRequired Invalid Characters: < , > , " Sample Size Rationale*: Provided the BAU Meetings, Citigroup_Master_Software_Lic and support_Agreement & Citigroup Master Purchase and Maintenance AgreementRequired Invalid Characters: < , > , " Sampling Methodology*: ---Select One--- Block Haphazard Judgemental None Nth item Proportional to size Random Systematic/interval Required Sample Size*: Sample Size must be a number between 1 and 200. Please enter a number Required Tester(s): Moori, Ashok Kumar Reddy (AR91297) Approver(s): Test Status: Work In Progress PLEASE SAVE YOUR WORK PERIODICALLY! Attachment(s): Required Citigroup_Master_Software_Lic...upport_Agreement_Dec_2004.zip Citigroup Master Purchase and Maintenance Agreement Dec 2004.zip OSBAU Meeting_Minutes November 08 v1 0(1of2).zip OSBAU Meeting_Minutes November 08 v1 0 (2of2).zip OSBAU Meeting_Minutes 1st December 08 v1 0.zip OSBAU Meeting_Minutes January 09 v1 0.zip Test Rating*: ---Select One--- Pass Fail Required Test Result Findings and Conclusions*: Provided the BAU Meetings, Citigroup_Master_Software_Lic and support_Agreement & Citigroup Master Purchase and Maintenance Agreement Required ================= Test: RCSA CTI EMEA STORAGE 23 Objective Of Self Test: Provide a sample of reports or inventories sent to SA team Provide a list of authorized HP engineers that are allowed to access WRDC Test Procedure: Provide a sample of reports or inventories sent to SA team Provide a list of authorized HP engineers that are allowed to access WRDC Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: Provided list of authorized HP engineers that are allowed to access WRDCRequired Invalid Characters: < , > , " Sample Size Rationale*: Provided list of authorized HP engineers that are allowed to access WRDCRequired Invalid Characters: < , > , " Sampling Methodology*: ---Select One--- Block Haphazard Judgemental None Nth item Proportional to size Random Systematic/interval Required Sample Size*: Sample Size must be a number between 1 and 200. Please enter a number Required Tester(s): Moori, Ashok Kumar Reddy (AR91297) Approver(s): Test Status: Submitted For Approval Attachment(s): Support_HP_22-01-2009.doc Test Rating*: ---Select One--- Pass Fail Required Test Result Findings and Conclusions*: Provided list of authorized HP engineers that are allowed to access WRDC Required Maximum 4000 characters are allowed. ========== For question 23 and 31 - can you set status to 'Submit for Approval' now. Still awaiting for EGG evidence for 29. Also, need you to update as follows and then set status to 'submit for Approval': RCSA CTI EMEA STORAGE 15 - N/A - Question to be removed during next RCSA Review Workshop RCSA CTI EMEA STORAGE 16 - Fail. Issue being addressed via Controlled RA - 2106EMEA RCSA CTI EMEA STORAGE 20 - N/A - Question to be removed during next RCSA Review Workshop RCSA CTI EMEA STORAGE 33 - N/A - Question to be removed during next RCSA Review Workshop Reference Sheet(s) Test: RCSA CTI EMEA STORAGE 21 Objective Of Self Test: Provide a sample of approved change requests for vendor access Test Procedure: Provide a sample of approved change requests for vendor access Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: 100% 100%Required Sample Size Rationale*: Provide a sample of approved change requests for vendor access Provide a sample of approved change requests for vendor access-EMEARequired Invalid Characters: < , > , " Sampling Methodology*: ---Select One--- Block Haphazard Judgemental None Nth item Proportional to size Random Systematic/interval Required Sample Size*: Sample Size must be a number between 1 and 200. Please enter a number Required Tester(s): Zajaczkowski, Maciej Zbigniew (MZ92563); Vilner, Annamaria (AV43517); Miklos, Gabor (GM23310); Weise, Thomas (tw00629) Approver(s): Test Status: Work In Progress PLEASE SAVE YOUR WORK PERIODICALLY! Attachment(s): Required Zurich_RCSA_IBM_Vendor_Mngmt_2009_Q1.zip London_RCSA_Vendor_Mngmt_2009_Q1.zip RCSA CTI EMEA STORAGE 21.doc WARSAW_STORAGE_21.ZIP Test Rating*: ---Select One--- Pass Fail Required Test Result Findings and Conclusions*: Warsaw: During the review period EMEA TI Regional Backup Support - Poland team members didn't requested Vendor Access to WRDC as it was not required. All DCSM access requests raised by EMEA TI Regional Backup Support - Poland were related to COB or tape/libray issues that were solved internaly. Required Maximum 4000 characters are allowed. ============= Home Reference Documents Logout 25-Feb-2009 | Current Testing Quarter: Q1,2009 Ashok Kumar Reddy Moori | EMEA Self-Assessment Perform Test(s) Approve Test(s) Search Test(s) Summary Reports Planning Phase Reports TDIR-HIR-RIR Report Risk–Control Report Control–Test Report Testing Phase Report Test Step Report Testing Status Details Report Assessment Phase Reports Self Assessment Report Compensating Controls Report Other Reports Detailed Issues CAPs Report Reports Test Status Test Download Test Program Corporate O&T > CTI > CTI > EMEA > Multi_EMEA_Storage_Regional Storage View Reference Sheet Reference Sheet(s) Test: RCSA CTI EMEA STORAGE 32 Objective Of Self Test: - Test Procedure: Provide evidence that compensating controls are effective- Provide a sample of meeting minutes from meetings that took place during testing period Provide a sample of action plans and evidence that required actions are being carried out Provide evidence of reconciliation process Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: SAN BAU Team Manager schedules regular meatings for discuss/track the BAU, Changes scheduled, and the work/issues handling in the team. These are regularly updated and tracked.Required Invalid Characters: < , > , " Sample Size Rationale*: Attached are the SAN BAU Team meeting Minutes which includes the discussing of BAU, Changes scheduled, and the work/issues handling in the teamRequired Invalid Characters: < , > , " Sampling Methodology*: ---Select One--- Block Haphazard Judgemental None Nth item Proportional to size Random Systematic/interval Required Sample Size*: Sample Size must be a number between 1 and 200. Please enter a number Required Tester(s): Vathsavai, Krishnam Raju (KV13183) Approver(s): Ahmed, Salauddin (SA47183) Test Status: Approved Attachment(s): SAN-BAU Team Meeting_300109.zip Test Rating*: ---Select One--- Pass Fail Required Test Result Findings and Conclusions*: SAN BAU Team Manager schedules regular meatings for discuss/track the BAU, Changes scheduled, and the work/issues handling in the team. These are regularly updated and tracked. Required Maximum 4000 characters are allowed. Invalid Characters: < , > , " Assessment History Date Approver Approver Comments Status 19-Feb-2009 Ahmed, Salauddin (SA47183) Approved www.citigroup.net Terms, conditions, caveats, and small print Copyright © 2007 Citigroup ================ Home Reference Documents Logout 25-Feb-2009 | Current Testing Quarter: Q1,2009 Ashok Kumar Reddy Moori | EMEA Self-Assessment Perform Test(s) Approve Test(s) Search Test(s) Summary Reports Planning Phase Reports TDIR-HIR-RIR Report Risk–Control Report Control–Test Report Testing Phase Report Test Step Report Testing Status Details Report Assessment Phase Reports Self Assessment Report Compensating Controls Report Other Reports Detailed Issues CAPs Report Reports Test Status Test Download Test Program Corporate O&T > CTI > CTI > EMEA > Multi_EMEA_Storage_Regional Storage View Reference Sheet Reference Sheet(s) Test: RCSA CTI EMEA STORAGE 50 Objective Of Self Test: Provide evidence that there has been a review of the GDSE standards and that work has began to ensure that all systems are compliant with any changes to the standards during the testing period One Info tickets should be available to cover this work Test Procedure: Provide evidence that there has been a review of the GDSE standards and that work has began to ensure that all systems are compliant with any changes to the standards during the testing period One Info tickets should be available to cover this work Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: All the GDSE releases are discussed as part of the weekyl SPIT team meeting. Any releases that require implementation are assigned to a member of the SPIT team, who raise the required change control, and implement the change.Required Invalid Characters: < , > , " Sample Size Rationale*: A Sample of the SPIT team minutes are enclosed in the details showing that the releases are discussed. All the changes raised are detailed in the evidence, none of them are related to GDSE recommended installs.Required Invalid Characters: < , > , " Sampling Methodology*: ---Select One--- Block Haphazard Judgemental None Nth item Proportional to size Random Systematic/interval Required Sample Size*: Sample Size must be a number between 1 and 200. Please enter a number Required Tester(s): Haynes, Paul (PH47197) Approver(s): Ahmed, Salauddin (SA47183) Test Status: Approved Attachment(s): change control listing.txt SPIT team minutes.zip Test Rating*: ---Select One--- Pass Fail Required Test Result Findings and Conclusions*: All the GDSE releases are discussed in the weekly meetings. Those that need to be installed are assigned to a SA. No GDSE releases were required or performed over the testing period. Required Maximum 4000 characters are allowed. Invalid Characters: < , > , " Assessment History Date Approver Approver Comments Status 19-Feb-2009 Ahmed, Salauddin (SA47183) Approved www.citigroup.net Terms, conditions, caveats, and small print Copyright © 2007 Citigroup =================== Home Reference Documents Logout 25-Feb-2009 | Current Testing Quarter: Q1,2009 Ashok Kumar Reddy Moori | EMEA Self-Assessment Perform Test(s) Approve Test(s) Search Test(s) Summary Reports Planning Phase Reports TDIR-HIR-RIR Report Risk–Control Report Control–Test Report Testing Phase Report Test Step Report Testing Status Details Report Assessment Phase Reports Self Assessment Report Compensating Controls Report Other Reports Detailed Issues CAPs Report Reports Test Status Test Download Test Program Corporate O&T > CTI > CTI > EMEA > Multi_EMEA_Storage_Regional Storage View Reference Sheet Reference Sheet(s) Test: RCSA CTI EMEA STORAGE 51 Objective Of Self Test: Provide a sample of agendas and minutes from vendor meeting that have taken place during the testing period. The agenda and minutes should show that all upgrades, capacity and EOL issues are being discussed Test Procedure: Provide a sample of agendas and minutes from vendor meeting that have taken place during the testing period. The agenda and minutes should show that all upgrades, capacity and EOL issues are being discussed Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: A sample of vendor meeting minutes taken during the test period are attached detailing upgrades, capacity and EOL issues being discussed.Required Invalid Characters: < , > , " Sample Size Rationale*: A sample of the regular meeting minutes have been attached.Required Invalid Characters: < , > , " Sampling Methodology*: ---Select One--- Block Haphazard Judgemental None Nth item Proportional to size Random Systematic/interval Required Sample Size*: Sample Size must be a number between 1 and 200. Please enter a number Required Tester(s): Haynes, Paul (PH47197) Approver(s): Ahmed, Salauddin (SA47183) Test Status: Approved Attachment(s): HDS Operational minutes.zip EMC Meeting Minutes 1.zip EMC Meeting Minutes 2.zip Test Rating*: ---Select One--- Pass Fail Required Test Result Findings and Conclusions*: One sample meeting minute for each month of the testing period is supplied from each vendor. These minutes detail and show discussion of upgrades, capacity and EOL issues. Required Maximum 4000 characters are allowed. Invalid Characters: < , > , " Assessment History Date Approver Approver Comments Status 19-Feb-2009 Ahmed, Salauddin (SA47183) Approved www.citigroup.net Terms, conditions, caveats, and small print Copyright © 2007 Citigroup ============= Home Reference Documents Logout 25-Feb-2009 | Current Testing Quarter: Q1,2009 Ashok Kumar Reddy Moori | EMEA Self-Assessment Perform Test(s) Approve Test(s) Search Test(s) Summary Reports Planning Phase Reports TDIR-HIR-RIR Report Risk–Control Report Control–Test Report Testing Phase Report Test Step Report Testing Status Details Report Assessment Phase Reports Self Assessment Report Compensating Controls Report Other Reports Detailed Issues CAPs Report Reports Test Status Test Download Test Program Corporate O&T > CTI > CTI > EMEA > Multi_EMEA_Storage_Regional Storage View Reference Sheet Reference Sheet(s) Test: RCSA CTI EMEA STORAGE 48 Objective Of Self Test: Provide EMS report detailing breakdown of EMS tickets raised that require PIT input Attach minutes of Storage BAU team meeting confirming that resolution of problems is on the agenda Test Procedure: Provide EMS report detailing breakdown of EMS tickets raised that require PIT input Attach minutes of Storage BAU team meeting confirming that resolution of problems is on the agenda Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: Check EMS system for entries related to manager 'Alistair Grant' and Impacted Category of 'Tech Infrastructure' to check for tickets raised against SPIT team during testing period.Required Invalid Characters: < , > , " Sample Size Rationale*: All tickets brought up by the search are checked to see if they are related the SPIT team.Required Invalid Characters: < , > , " Sampling Methodology*: ---Select One--- Block Haphazard Judgemental None Nth item Proportional to size Random Systematic/interval Required Sample Size*: Sample Size must be a number between 1 and 200. Please enter a number Required Tester(s): Haynes, Paul (PH47197) Approver(s): Bocchiola, Paolo (PB92907) Test Status: Submitted For Approval Attachment(s): EMS page.doc Test Rating*: ---Select One--- Pass Fail Required Test Result Findings and Conclusions*: 12 tickets were found but none of them were related to the Storage Projects team. Required Maximum 4000 characters are allowed. Invalid Characters: < , > , " Assessment History Date Approver Approver Comments Status 12-Feb-2009 Bocchiola, Paolo (PB92907) Please amend as per QA reveiw Reject www.citigroup.net Terms, conditions, caveats, and small print Copyright © 2007 Citigroup ================= Home Reference Documents Logout 25-Feb-2009 | Current Testing Quarter: Q1,2009 Ashok Kumar Reddy Moori | EMEA Self-Assessment Perform Test(s) Approve Test(s) Search Test(s) Summary Reports Planning Phase Reports TDIR-HIR-RIR Report Risk–Control Report Control–Test Report Testing Phase Report Test Step Report Testing Status Details Report Assessment Phase Reports Self Assessment Report Compensating Controls Report Other Reports Detailed Issues CAPs Report Reports Test Status Test Download Test Program Corporate O&T > CTI > CTI > EMEA > Multi_EMEA_Storage_Regional Storage View Reference Sheet Reference Sheet(s) Test: RCSA CTI EMEA STORAGE 28 Objective Of Self Test: - Test Procedure: Provide static sheet and confirmation that all provisioning or removals have followed the steps in the sheet. Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: All the Provisionings and removals are planned according to the corresponding RFC,VT/VR or Aperture. List of all the activities are documented and discussed on every friday before implementation on Saturday.Required Invalid Characters: < , > , " Sample Size Rationale*: Attached is contains the Weekend Activities consolidation worksheets which are discussed on every friday before implementation on Saturday.Required Invalid Characters: < , > , " Sampling Methodology*: ---Select One--- Block Haphazard Judgemental None Nth item Proportional to size Random Systematic/interval Required Sample Size*: Sample Size must be a number between 1 and 200. Please enter a number Required Tester(s): Vathsavai, Krishnam Raju (KV13183) Approver(s): Ahmed, Salauddin (SA47183) Test Status: Approved Attachment(s): Weekendwork.zip Test Rating*: ---Select One--- Pass Fail Required Test Result Findings and Conclusions*: All the Provisionings and removals are planned according to the corresponding RFC,VT/VR, SR or Aperture. List of all the activities are documented and discussed on every friday before implementation on Saturday. Required Maximum 4000 characters are allowed. Invalid Characters: < , > , " Assessment History Date Approver Approver Comments Status 19-Feb-2009 Ahmed, Salauddin (SA47183) Approved www.citigroup.net Terms, conditions, caveats, and small print Copyright © 2007 Citigroup ========= Home Reference Documents Logout 25-Feb-2009 | Current Testing Quarter: Q1,2009 Ashok Kumar Reddy Moori | EMEA Self-Assessment Perform Test(s) Approve Test(s) Search Test(s) Summary Reports Planning Phase Reports TDIR-HIR-RIR Report Risk–Control Report Control–Test Report Testing Phase Report Test Step Report Testing Status Details Report Assessment Phase Reports Self Assessment Report Compensating Controls Report Other Reports Detailed Issues CAPs Report Reports Test Status Test Download Test Program Corporate O&T > CTI > CTI > EMEA > Multi_EMEA_Storage_Regional Storage View Reference Sheet Reference Sheet(s) Test: RCSA CTI EMEA STORAGE 27 Objective Of Self Test: Provide evidence that compensating controls are effective- Provide a sample of weekly reconciliations that have been performed Test Procedure: Provide evidence that compensating controls are effective- Provide a sample of weekly reconciliations that have been performed Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: Daily generated files using native EMC SYMCLI interrogation commands on the Volume Logix Database (VCMDB) are compared and reconciled with billing files. These files are generated by an in-house developed DataBase tool - SANDb. They are also checked for accuracy by Application Owners and SAs for the specific hostsRequired Invalid Characters: < , > , " Sample Size Rationale*: No errors can be accepted as there could be potential file integrity issuesRequired Invalid Characters: < , > , " Sampling Methodology*: ---Select One--- Block Haphazard Judgemental None Nth item Proportional to size Random Systematic/interval Required Sample Size*: Sample Size must be a number between 1 and 200. Please enter a number Required Tester(s): Coles, David Peter (DC91175) Approver(s): Ahmed, Salauddin (SA47183) Test Status: Approved Attachment(s): Billing.zip Test Rating*: ---Select One--- Pass Fail Required Test Result Findings and Conclusions*: No issues found during last Qtr Required Maximum 4000 characters are allowed. Invalid Characters: < , > , " Assessment History Date Approver Approver Comments Status 20-Feb-2009 Ahmed, Salauddin (SA47183) Approved www.citigroup.net Terms, conditions, caveats, and small print Copyright © 2007 Citigroup ================== Home Reference Documents Logout 25-Feb-2009 | Current Testing Quarter: Q1,2009 Ashok Kumar Reddy Moori | EMEA Self-Assessment Perform Test(s) Approve Test(s) Search Test(s) Summary Reports Planning Phase Reports TDIR-HIR-RIR Report Risk–Control Report Control–Test Report Testing Phase Report Test Step Report Testing Status Details Report Assessment Phase Reports Self Assessment Report Compensating Controls Report Other Reports Detailed Issues CAPs Report Reports Test Status Test Download Test Program Corporate O&T > CTI > CTI > EMEA > Multi_EMEA_Storage_Regional Storage View Reference Sheet Reference Sheet(s) Test: RCSA CTI EMEA STORAGE 26 Objective Of Self Test: Provide sample of recommendations made by vendor. Provide sample of change tickets that have been raised as a result of vendor recommendations. Test Procedure: Provide sample of recommendations made by vendor. Provide sample of change tickets that have been raised as a result of vendor recommendations. Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: UK - Not applicable DE - Not applicable PL - Not applicable EGG - Not aplpicableRequired Invalid Characters: < , > , " Sample Size Rationale*: N/ARequired Invalid Characters: < , > , " Sampling Methodology*: ---Select One--- Block Haphazard Judgemental None Nth item Proportional to size Random Systematic/interval Required Sample Size*: Sample Size must be a number between 1 and 200. Please enter a number Required Tester(s): Coles, David Peter (DC91175) Approver(s): Ahmed, Salauddin (SA47183) Test Status: Approved Attachment(s): Not Available Test Rating*: ---Select One--- Pass Fail Required Test Result Findings and Conclusions*: UK - Not applicable DE - Not applicable PL - Not applicable EGG - Not aplpicable Required Maximum 4000 characters are allowed. Invalid Characters: < , > , " Assessment History Date Approver Approver Comments Status 20-Feb-2009 Ahmed, Salauddin (SA47183) Approved www.citigroup.net Terms, conditions, caveats, and small print Copyright © 2007 Citigroup =============== Home Reference Documents Logout 25-Feb-2009 | Current Testing Quarter: Q1,2009 Ashok Kumar Reddy Moori | EMEA Self-Assessment Perform Test(s) Approve Test(s) Search Test(s) Summary Reports Planning Phase Reports TDIR-HIR-RIR Report Risk–Control Report Control–Test Report Testing Phase Report Test Step Report Testing Status Details Report Assessment Phase Reports Self Assessment Report Compensating Controls Report Other Reports Detailed Issues CAPs Report Reports Test Status Test Download Test Program Corporate O&T > CTI > CTI > EMEA > Multi_EMEA_Storage_Regional Storage View Reference Sheet Reference Sheet(s) Test: RCSA CTI EMEA STORAGE 25 Objective Of Self Test: Provide evidence of a sample of threat alerts from vendor Provide evidence of GDSE approval and subsequent change records raised to cover the deployment of any required patches Test Procedure: Provide evidence of a sample of threat alerts from vendor Provide evidence of GDSE approval and subsequent change records raised to cover the deployment of any required patches Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: Not ApplicableRequired Invalid Characters: < , > , " Sample Size Rationale*: Not ApplicableRequired Invalid Characters: < , > , " Sampling Methodology*: ---Select One--- Block Haphazard Judgemental None Nth item Proportional to size Random Systematic/interval Required Sample Size*: Sample Size must be a number between 1 and 200. Please enter a number Required Tester(s): Coles, David Peter (DC91175) Approver(s): Ahmed, Salauddin (SA47183) Test Status: Approved Attachment(s): Not Available Test Rating*: ---Select One--- Pass Fail Required Test Result Findings and Conclusions*: N/A Required Maximum 4000 characters are allowed. Invalid Characters: < , > , " Assessment History Date Approver Approver Comments Status 20-Feb-2009 Ahmed, Salauddin (SA47183) Approved www.citigroup.net Terms, conditions, caveats, and small print Copyright © 2007 Citigroup =============== Home Reference Documents Logout 25-Feb-2009 | Current Testing Quarter: Q1,2009 Ashok Kumar Reddy Moori | EMEA Self-Assessment Perform Test(s) Approve Test(s) Search Test(s) Summary Reports Planning Phase Reports TDIR-HIR-RIR Report Risk–Control Report Control–Test Report Testing Phase Report Test Step Report Testing Status Details Report Assessment Phase Reports Self Assessment Report Compensating Controls Report Other Reports Detailed Issues CAPs Report Reports Test Status Test Download Test Program Corporate O&T > CTI > CTI > EMEA > Multi_EMEA_Storage_Regional Storage View Reference Sheet Reference Sheet(s) Test: RCSA CTI EMEA STORAGE 24 Objective Of Self Test: Provide evidence that passwords are being changed on a monthly basis for all users. This could be in a number of formats- email attestation from SAN team leader, OATS task, etc. Test Procedure: Provide evidence that passwords are being changed on a monthly basis for all users. This could be in a number of formats- email attestation from SAN team leader, OATS task, etc. Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: All members of SAN Support. All are required to change their passwords regularly.Required Invalid Characters: < , > , " Sample Size Rationale*: To review less than 100% would make thius test meaninglessRequired Invalid Characters: < , > , " Sampling Methodology*: ---Select One--- Block Haphazard Judgemental None Nth item Proportional to size Random Systematic/interval Required Sample Size*: Sample Size must be a number between 1 and 200. Please enter a number Required Tester(s): Coles, David Peter (DC91175) Approver(s): Ahmed, Salauddin (SA47183) Test Status: Approved Attachment(s): CNX Mgr passwds.doc Test Rating*: ---Select One--- Pass Fail Required Test Result Findings and Conclusions*: Connectrix Manager no longer logs users changing their passwords. Therefore, completed VCC tasks are the only way we can record this process as successful Required Maximum 4000 characters are allowed. Invalid Characters: < , > , " Assessment History Date Approver Approver Comments Status 20-Feb-2009 Ahmed, Salauddin (SA47183) Approved www.citigroup.net Terms, conditions, caveats, and small print Copyright © 2007 Citigroup ================= Home Reference Documents Logout 25-Feb-2009 | Current Testing Quarter: Q1,2009 Ashok Kumar Reddy Moori | EMEA Self-Assessment Perform Test(s) Approve Test(s) Search Test(s) Summary Reports Planning Phase Reports TDIR-HIR-RIR Report Risk–Control Report Control–Test Report Testing Phase Report Test Step Report Testing Status Details Report Assessment Phase Reports Self Assessment Report Compensating Controls Report Other Reports Detailed Issues CAPs Report Reports Test Status Test Download Test Program Corporate O&T > CTI > CTI > EMEA > Multi_EMEA_Storage_Regional Storage View Reference Sheet Reference Sheet(s) Test: RCSA CTI EMEA STORAGE 22 Objective Of Self Test: - Test Procedure: Provide evidence that compensating controls are effective- Provide location of cabinet and confirmation that it is securely locked Provide inventory of disks Provide evidence of monthly reconciliation Frequency: Quarterly Quarter Tested: Q1,2009 Assessment Due Date: 06-Mar-2009 Next Test Date: 31-May-2009 Test Population/Rationale*: Disk Inventory and reconciliation is done by DCSM team but not the SAN Team and hence this is not applicable.Required Invalid Characters: < , > , " Sample Size Rationale*: Disk Inventory and reconciliation is done by DCSM team but not the SAN Team and hence this is not applicable.Required Invalid Characters: < , > , " Sampling Methodology*: ---Select One--- Block Haphazard Judgemental None Nth item Proportional to size Random Systematic/interval Required Sample Size*: Sample Size must be a number between 1 and 200. Please enter a number Required Tester(s): Vathsavai, Krishnam Raju (KV13183) Approver(s): Ahmed, Salauddin (SA47183) Test Status: Approved Attachment(s): Not Available Test Rating*: ---Select One--- Pass Fail Required Test Result Findings and Conclusions*: Disk Inventory and reconciliation is done by DCSM team but not the SAN Team and hence this is not applicable. Required Maximum 4000 characters are allowed. Invalid Characters: < , > , " Assessment History Date Approver Approver Comments Status 19-Feb-2009 Ahmed, Salauddin (SA47183) Approved www.citigroup.net Terms, conditions, caveats, and small print Copyright © 2007 Citigroup