AReport onManagement Information System ofHero MotoCorpSubmitted To: Dr. Susheel ChhabraDAT E O S!" MISSIO#:November 25, 2011S!" MIT TED "$:%roup &&Se'tion "SO#AM AH!(A ) &*+,&&A#-ITA A%A./A0 ) &*1,&&-!MA. SOMI0 ) &*2,&& #.3E#-ATA .AMA#A .EDD$ ) &&*,&& MA#ISH THA-!. ) &&+,&& 0al "ahadur Shastri Institute of Management4DelhiTable of ContentsS.#o.Topi's5g. #o.& Acknowledgement 36 Research Methodology47 ntrod!ct"on 5#ompany $ro%"le &+'!ppl"er and #!stomer Relat"onsh"p Management128 e(R mplementat"on15)$' and M' 1&19 *ec"s"on '!pport 'ystem1+,-pert s!pport 'ystem1.2&* 'ystem Analys"s and *es"gn21&& /"rt!al $r"vate Network 22n %ormat"on and ) 'ec!r"ty Management23&6&7 0"bl"ogr aphy 312 AC-#O/0ED%EME#T1ewo!ldl"ketoe-presso!rdeepestsenseo%grat"t!detoo!rpro2ectg!"de*r3'!sheel#hhabra%orh"s"nval!ableg!"dance, "nsp"rat"on and enco!ragement thatwe rece"ved%romh"mthro!gho!t the pro2ect3 4!re%%orts"n accompl"sh"n gth"spro2ect are a res!lt o% constantmot"vat"on and "nval!able learn"ng "mparted byh"m35ro!p 116 'ect"on 7 0)r"mester 3 .ESEA.CH METHODO0O%$)hepro2ectent"tledas8management"n%ormat"onsystemat(,R4M4)4#4R$9was!ndertaken and the research was cond!cted "n twophases:13 $r"mary s!rvey23 'econdary s!rvey'econdarys!rvey:;1ehavecollectedsomel"terat!rerev"ewsandalsosomek"ndo%relevant data %or the pro2ect thro!gh "nternet and by !s"ng some books3$r"mary s!rvey: ; $r"mary s!rvey was cond!cted by v"s"t"ng the compan y . 1easked abo!tthe"r management "n%ormat"on system3)he data prov"ded by them was analysed by !s34 I#T.OD!CTIO#Managementn%ormat"on'ystems"ngorderacc!racy,aswell3)hey?vegreatlyred!cedthechanceso%m"smatched orderstoo3Boroneth"ng,"t?seas"er%or s!ppl"ers to checkthe"rorders ontheportalandtheyknowthattheportal?s"n%ormat"on"sbothacc!rateand!ptothem"n!te3'"ncetheadvancesh"pp"ngnot"%"cat"oncreatedb ythes!ppl"er"sder"ved%romthep!rchaseorder,thechance o% a del"very m"smatch w"th the order "s almost >ero3914 eH. IM50EME#TATIO#1"thtechnologyto!ch"ngallaspectso %today?sb!s"ness,there"s"ncreas"ng!sageo%)andnternettechnolog"es"nacompany?s(Rdepartment3'!ddenly(Rmanagersare%"nd"ngthemselves"nawh"rlw"ndo%technolog"calchanges,w"thadopt"ono%)"ng or d"ssem"nat"ng"n%ormat"on tothe"r employees3Allth"shasres!lted "n(Rpro%ess"onals do"ngaway w"th costly, t"me;cons!m"ng and red!ndantprocesses and opt"n g%or );enabled (R systems, wh"ch accord"ngto"nd!strye-perts,marks thebeg"nn"ng o% a new era "n the %!nct"on"ng o% (R pro%ess"onals(eroMoto#orphasopted%ora'A$(R mod!le3'N0alas!braman"am,v"cepres"dent;"n%ormat"onsystems,(eroMoto#orp,"n%ormsthatthecompany "s"ntheprocesso%start"ngan,''system wh"chw"llenableemployeesto assess all"n%ormat"onabo!tthe"rsalary, ta-,leaveloan,etc3Bor"tsknowledgemanagementreA!"rements,thecompany"splann"ngtoset!paportal whereemployees can access "n%ormat"on, e-change "deas %reely andreadart"cles comp"ledby the (R department and all employees3 Eater, they also plan to !se the"ntranet %or e-ternal and"nternal recr!"tment, assessment and appra"sal p!rposes15 1& I#TE..E0ATIO#SHI5S AMO#% S$STEMS1C DECISIO# S!55O.T S$STEMManagement levelO np!ts: )ransact"on level data F M' ReportsO $rocess"ng: nteract"veO 4!tp!ts: *ec"s"on analys"sO Isers: M"ddle F )op;Eevel Managers)yp"cal "n%ormat"on that a dec"s"on s!pport appl"cat"on m"ght gather andpresent are:"nventor"eso%"n%ormat"onassetsEC!TI3E S!55O.T S$STEM'!pply the necessary tools to sen"or management3)hedec"s"onsatth"slevelo%thecompanyare!s!allyneverstr!ct!redandco!ldbedescr"bed as Ped!catedg!esses3 8,-ec!t"ves relyas m!ch, "%not more so, on e- ternal data than they do ondata"nternaltothe"r organ">at"on3*ec"s"onsm!stbemade"ntheconte-to%theworldo!ts"detheorgan">at"on3)heproblemsands"t!at"onssen"ore- ec!t"ves%acearevery%l!"d,alwaysch ang"ng,sothesystem m!st be %le-"ble and easy to man"p!late3,-ec!t"veso%ten%ace"n%ormat"onoverloadandm!stbeabletoseparatethecha%%%romthe wheat "n order to make the r"ght dec"s"on34n theotherhand,"%the "n%ormat"ontheyhave,"s not deta"ledeno!ghtheymaynotbeable to make the best dec"s"on3An,''cans!pplythes!mmar">ed"n%ormat"onHe-ec!t"vesneedandyetprov"deth eopport!n"ty to dr"ll down to more deta"l "% necessary31. DATA 0O/ DIA%.AM)he below d"agramshows the >erolevel data%lowd"agram o%asalesdepartment3 t"s made%orthemater"alproc!rementproced!re3talsoment"onsalltheotherd"%%erentent"t"esl"kestoresdepartment,%"nancedepartmentetc3thatare"nvolvedwhena!serplacedamater"alp!rchasereA!est320 S$STEMS A#A0$SIS A#D DESI%#(eroMoto#orpbe"ngatwowheelerg"ant%ollowstheprototyp"ngmodel%oranaly>"nganddes"gn"ngthesystem3#ons"der"ngaprocesso%la!nch"nganewb"ke"nthemarket,a%ter"dent"%y"ng thetargetcons!mersect"on,companymakesaprototypeortestb"keandst!d"es "tsper%ormance3)hecons!mersg"vethe"r"ns"ghtsandtheprocesso%des"gnandprototyp"ng"srepeated aga"n t"ll the company "s sat"s%"ed that "t sho!ld go %or massprod!ct"on3 21 3I.T!A0 5.I3ATE #ET/O.-A /"rt!al$r"vate Networkat"onas"ntheb ank"ng,%"nanc"alserv"cesand"ns!ranceedw"thMcA%eeserveranddownloadthe*A)%"leeo%spamandtheb!s"nesss!%%ered34%tenb!s"nesscorr espondencewas"ncorrectly class"%"ed as spam, a case o% %alse pos"t"ves, and deleted wh"lespam cont"n!ed to po!r"n3Ma"lbo-eswerecloggedw"thspam3(av"ngcloseto.,000spammessagesh"tt"ngthelocalma"lserveronada"lybas"swassometh"ngthatwasnotacceptableas,download"ngleg"t"matema"lalongw"th thetorrent o% spam thatdodged the'$?s%"lters %rom thee- ternal ma"l servertothe local one was a pa"n%!lly slow and, A!"te o%ten, %r!strat"ng process3,mphas">"nganothers"deo%th"scr"s"s,0andw"dthcons!mpt"ond"dnot2!st"ncrease,"tshotthro!ghtheroo%andtokeepadd"ngbandw"dthwasnotav"ablesol!t"on34ncethemessagesreachedan"nd"v"d!al?sma"lbo-es, theyhadtobecheckedanddeletedman!ally3Manyat"mesthe rec"p"ents weretempted to read the spamandthema"lprocess"ng t"mekept "ncreas"ng at thecost o% prod!ct"v"ty3 Eeg"t"mate e;ma"l messages were o%ten lost "n the ma>eo% spam3)he management beganA!est"on"ngthe) departmentregard"ng thee-tento% spam, wh"ch wasmostly !nanswerable, desp"te the )team?s best e%%orts3 ,mployeesstat"oned at remotelocat"onss!chas 5!rgaonand *har!herawereworsth"t3Borthem,thema"lwas%"rstdownloadedtothelocalma"lserver andthenhadtobe$4$pedtothe"rremote"nd"v"d!alma"lbo-es3)hedownload t"me o% an"nd"v"d!al message was very h"gh and th"s waspart"c!larly %r!strat"ng s"nce at least 50 percent o% the ma"l was spam3 25 #eed for fire?all)he need%or %!rtherbee%"ng !pthesec!r"ty set;!p beyond an ant";v"r!ssol!t"onwas%eltas thecompany%!rtheropened !p"tssystemstoe-ternalaccess3Aro!ndayear;and;a;hal%ago,apart%romprov"d"ngnternetaccessthro!ghthepro-yserver,thecompanyalsodec"dedtoprov"deconnect"v"tyw"thdealersandvendors%or"n%ormat"onshar"ng,"3e3theyco!ldd"rectlylog"ntothe1ebserver3)h"sreA!"redthedeploymento%a%"rewalltog!ardthesystems%romposs"blehackersandv"r!sattacks3)h"swasthe%"rstt"methattheywerereallyconnectedtothe"rpartners3,arl"ertheyonlyhadama"lgatewaythro!ghwh"chtheye-changedma"l3'o,therereallywasn?t aneed%or a %"rewallatthat t"me30!t now, s"nce theyareallow"ngpeople to log"nand w"th people access"ng the nternet there "s the need %or a %"r ewall3B"rewallsdeplo yedat#omsatMa-:(eroMoto#orphasaper"meter%"rewallthatservesasthenternetgateway%orboththeplantsandheado%%"ce3thaschosen#heckpo"ntas"ts%"rewall,wh"chr!ns ona Nok"a bo- and "s managedand mon"toredby the serv"ceprov"der, #omsat Ma-3)he company?s ) sec!r"tyarch"tect!red"v"desthe network"nto >ones,basedon the %!nct"ono%the "n%rastr!ct!re conta"ned there"n3 )h e >ones created are:*MS >one O)h"rd;party >one OAppl"cat"on servers >one O#r"t"cal servers >one O'ec!r"ty management >one ONetwork and system management >one OEAN F 1AN >one O!nauthori@ed Internet a''essRestr"ct"ono%accessto!na!thor">eds"tes"stakencarethro!ghthepro- yserver,wh"chwasdeployedaro!nd twoyearsago%ornternet accessto"nternal!sers3)her!les %oraccesscontrolhave been de%"ned "n the server "tsel%3t de%"nes %actors l"ke wh"ch $#s haveaccess to the 2& nternet,thes"testhatcanbeaccessed,t"meper"odd!r"ngwh"chonlycerta"n!serscanaccessthe nternet, etc3)he companyhas takenvar"o!smeas!restoens!redata "ntegr"tyd!r"ng"nternalaccessaswell3thas deployed$5$ so%tware onthecr"t"caldesktops and notebooksw"th"n the organ">at"on%orencrypt"ngdata31h"letheso%twarewasdeployedaro!ndtwo;and;a;hal%yearsago, "tkeepson"dent"%y"ngandadd"n gcr"t"calnotebooksanddesktops3)he"n%ormat"ononthedesktopsandnotebooks"skept"na%olderand"sencrypted,wh"chreA!"resa!sernameandpasswordtoaccess "t3B!rthermore,(eroMoto#orphasb!"lt"n"ntegr"ty"ntheappl"cat"on"tsel%,wh"ch"swelldoc!mented w"thpro%"les%or each !ser3*epend"ngon h"s6her pro%"le, the!sergets the r"ghts %oraccess"ng the data3 )he a!thent"cat"on "s done thro!gh passwords3And the ans?er ?asA)he spam "ncl!ded a goodsm"dgeno%$h"sh"ng wh"ch sl"pped thro!gh thepr"marysec!r"ty layerat the '$?s end3 Malware enter"ng thro!gh the messages andnternetbrows"ng wasalso a ma2orso!rceo%concern3'everalmessagesconta"nedamal"c"o!spayloado%v"r!ses,spywareand)ro2ans34ncetheseenteredthenetwork,theypromptlybegancons!m"ngbandw"dthandca!s"ng systemcrashes3Inprotectedand !nrestr"ctednternet brows"ngalso le%tgap"ngsec!r"tyholes3)helacko%%"ltersonbrows"ngle%ttheorgan">at"onw"deopentoattack%rommalware,track"ng cook"es, spyware and key loggers3*"gv"2ays"nh#h!dasama,/"ce$res"dent,'ales,#yberoamsa"dthat,nterpr"sesarerep lac"ngbest;o%;breedsec!r"tysol!t"ons"nthe"rnetworksw"thIn"%"ed)hreatManagementsol!t"ons3#yberoam?sall;"n;onesec!r"typlat%orma"dsthetrans"t"onw"tho!tcomprom"s"ngthe%eat!regran!lar"ty o% standalone sol!t"ons3 #yberoam?s"dent"ty;based sec!r"tyempowers adm"n"stratorsto proact"vely de%end the enterpr"se network aga"nst both "nternal ande-ternal threats391h"lecons"der"ngthecoreproblemandsens"t"v"tyo%the"ss!e%or(eroMoto#orp,)arak)echnolog"es,b!s"nesspartnero%# yberoam,s!ggestedaplantosec!rethecompany?se;ma"l3@ose N!r"an, #44 o% )arak )echnolog"es sa"d a%ter e- am"n"ng the problemthey !nderstood that 2C responset"me wascr!c"al3 )he messag"ngappl"cat"oncannot godown%oralongper"odo%t"meat a company s!ch as (ero Moto#orp3 )hey o%%ered them #yberoam?s ant";spam so%tware3Ratherthango"ngo!t%orpo"nt;to;po"ntsol!t"onswes!ggestedthatthecompan ygo"n%orIn"%"ed )hreat Management at"onalprod!ct"v"ty3Eacko%nternet!sageacco!ntab"l"ty ledto mal"c"o!ss"tes be"ng s!r%ed,wh"ch"nt!rn"n%ectedthenetworkw"tha host o% spyware3Asaremedytoslowbrows"ngandotherb andw"dthproblems,thecompanywas%orcedto!pgrade"ts"n"t"al&4Nbpsnternetconnect"ontoa4Mbpsp"pe3Get,thecompla"ntspers"stedevena%terth"sA!ant! mleap"nbandw"dthava"lab"l"ty3)heyp!rchased%o!r#yberoamappl"ances,three 250"s andone100"34ne250" appl"ance"sdeployedato!rcorporateo%%"ce"nNew*elh",andoneeachatprod!ct"onplants"n*har!heraand5!rgaon3A100"appl"ance"sdeployed at the"r !pcom"ng %ac"l"ty at (ar"dwar3 All#yberoam appl"anceshave been deployed "nbr"dge mode3 )he ent"re ma"l and 1eb tra%%"c passes thro!gh #yberoam3The 'hanged s'enario$ost;"mplementat"on,nternetaccess"sprod!ct"vely%oc!sed3)h"s"samplyr e%lected"nthebandw"dth!sage34nce"ns!%%"c"ent,bandw"dthava"lab"l"ty"snowA!"tesat"s%actor y3)otalbandw"dthcons!mpt"on%ellsharplyandthe'$b"llsalsotookanosed"ve3Acleannetwork,sa%eandrespons"bles!r%"ng andspam%reema"lbo-es have allc!lm"nated"n a drast"cred!ct"on "n calls to the ) helpdesk3 2+ Information se'urity poli'y1h"lethecompanyhadsomedoc!mentedpol"c"esrelat"ngtovar"o!saspects,"ncl!d"ng)sec!r"typost;1...,theywerenotcomprehen s"veeno!ghtocoverallareas3ncreas"nglye-pand"ngconnect"v"tywarr antedtheneed%oracompletepol"cy,de%"n"ngthesec!r"ty"ss!esboth%romw"th"nando!ts"detheorgan">at"on3)hecompan y?splans%orconnect"v"tyw"thb!s"nesspartners"ncl!dedroll"ngo!tthesecondphaseo%"tss!pplycha"nsol!t"on,allow"ngdealersandvendorsto"nteract"velydotransact"onsw"ththecompanyontheNet3