isms air ggn

Upload: atmaram13

Post on 03-Apr-2018

231 views

Category:

Documents


0 download

TRANSCRIPT

  • 7/28/2019 Isms Air Ggn

    1/18

    156439607.xls.ms_office eFunds International

    Document Version

    Name of the

    Document

    Version Number

    Document

    Defination

    Document ID

    Author of the

    Document

    Reviewer of the

    Document

    Document

    Approved By

    Effective Date

    Version Number

    1.0

    2.0

    Sr.No

    Document Version

    Document Distribu

    Mum-ChxD-RA-01 Confidential Doc Info

  • 7/28/2019 Isms Air Ggn

    2/18

    156439607.xls.ms_office eFunds International

    18-Apr-13

    Asset Inventory Register -Template

    2.0

    This documment identifies and evaluates assets for the processes

    FISINDIA_ISMS_DeptName_ProcessName_AIR_TMP_2.0

    Gaurav Upadhyaya

    Dheeraj Bhalla

    18-Apr-13

    Revision Description

    Initial Version

    Approved Version

    Name

    History

    tion List

    Mum-ChxD-RA-01 Confidential Doc Info

  • 7/28/2019 Isms Air Ggn

    3/18

    156439607.xls.ms_office eFunds International

    Date Change Author Change Approver

    18-Apr-13Gaurav

    Upadhyaya

    Organization/Team Purpose

    Document Classification: Confidential

    Mum-ChxD-RA-01 Confidential Doc Info

  • 7/28/2019 Isms Air Ggn

    4/18

    Following are the guidelines for listing assets and classifying them:-

    Listing assets

    Process Name - List Down the name of the process

    Sub Process Name - List Down the name of the sub process (if any)

    Asset Name - List Down the names of the assets that support the functioning of the departmen

    a) Software Assets

    Software Assets include business applications, knowledge management applications, developm

    Software assets can be of two broad types: Stand Alone and Client/Server based or Web-Base

    Client/Server or Web-based applications, the software name shall be mentioned under Softwar

    This section will also contain Operating Systems and Names of Databases such as Oracle, My

    b) Information Assets

    Information assets include databases, data files, system documentation, user manuals, trainingIn addition to covering the above examples, the data represented by the client/server or web-ba

    c) Paper Documents

    Contracts, company documentation, business results, purchase document, invoices, license ag

    d) Infrastructure Assets

    Infrastructure assets include buildings, networking equipment, security devices, backup media,

    In this section, we will be focusing on the hardware appliance itself. The other aspects related to

    e) Services

    Services include computing, telecommunications, heating, lighting, gas, water, air conditioning, i

    f) People Assets

    People assets include personnel and contractors, etc.

    Asset Owner - List down the name of the owner of the asset

    The term 'owner' identifies an individual or entit that has a roved mana ement res onsibilit f

  • 7/28/2019 Isms Air Ggn

    5/18

  • 7/28/2019 Isms Air Ggn

    6/18

    /work environment/process under the following categories

    ent tools, utilities etc.

    Applications. Generally Stand Alone Applications {Adobe, Winzip, etc} do not have any data directly ass

    Assets whereas the Data related to the application shall be written under Information Assets. The data

    ql. In the case of a firewall or router, this section will contain the name of the Operating System i.e. IOS i

    material, operational and support procedures, software licenses, installation media, business continuity ped applications will be mentioned here. Also in the case of network devices, the configuration files need

    eement etc.

    oftware media, printers, biometric devices, server racks, desktops etc.

    a hardware box such as OS, Database, Application and Data will be covered under Software and Inform

    ntruder alarms, fire control, generators, UPS. Etc

    or controllin the roduction develo ment maintenance use and securit of the assets. The term 'owne

  • 7/28/2019 Isms Air Ggn

    7/18

  • 7/28/2019 Isms Air Ggn

    8/18

    ociated with it but rather the data is found in locations such as Shared Drive, Share point, Desktop, Lapt

    ssociated with Client/Server or Web-Based applications can be found in Databases or Repositories.

    case of Cisco devices.

    lans, contracts, guidelines, company documentation, business results, HR records etc.d to implement the access and routing rules will be mentioned here.

    ation Assets.

    ' does not mean that the erson actuall has an ro ert ri hts to the asset.

  • 7/28/2019 Isms Air Ggn

    9/18

  • 7/28/2019 Isms Air Ggn

    10/18

    op. In the case of the

  • 7/28/2019 Isms Air Ggn

    11/18

  • 7/28/2019 Isms Air Ggn

    12/18

    Medium Low

    -Absence or no violation of legislation

    and/or regulation

    Loss of goodwill/trust amongst FIS staff Neglible or no Loss of Goodwill

    Negative effect on the reputation of thebusiness process within FIS

    Neglible or No negative effect on thereputation

    Leads to Breach associated with

    Internal classified InformationLeads to Breach of Public Information

    - No Endangerment of personal safety

    Medium effects on law enforcement No effects on law enforcement

    - No Breach of Public order

    Medium Financial Loss or Medium

    cost involved in repairingdamage/asset

    Low to Negligible Financial Loss

    involved in repairing damage/asset

    Disruption occurs to a defined set of

    business processes

    Disruption occures to a neglible set of

    business processes

    Business Process can run partially but

    at limited scale if breach to asset is

    successful

    Neglible or no disruption to business

    process if asset is compromised

    - No Breach of Contract

    - -

    -Breach does not lead to loss of

    customers

    Neglible or No Loss of competitive

    advantage

  • 7/28/2019 Isms Air Ggn

    13/18

    Sr.No Process Name Sub Process Name Asset Name Asset Owner

    1 Marketlive CS/Upgrade Microsoft Outlook 2010 FIS-Marketlive

    2 Marketlive CS/Upgrade MS Office 2010 FIS-Marketlive

    3 Marketlive CS/Upgrade Adobe Reader FIS-Marketlive

    4 Marketlive CS/Upgrade Adobe Flash Player FIS-Marketlive5 Marketlive CS/Upgrade Cisco VPN FIS-Marketlive

    6 Marketlive CS/Upgrade Ace Project FIS

    7 Marketlive CS/Upgrade Tortoise SVN FIS-Marketlive

    8 Marketlive CS/Upgrade GIT FIS-Marketlive

    9 Marketlive CS/Upgrade Eclipse FIS-Marketlive

    10 Marketlive CS/Upgrade Ant FIS-Marketlive

    11 Marketlive CS/Upgrade JDK 1.6 FIS-Marketlive

    12 Marketlive CS/Upgrade MongoVUE FIS-Marketlive

    13 Marketlive CS/Upgrade Oracle 10g FIS-Marketlive

    14 Marketlive CS/Upgrade Oracle XE FIS-Marketlive

    15 Marketlive CS/Upgrade SQL Developer FIS-Marketlive

    16 Marketlive CS/Upgrade DBVisualizer FIS-Marketlive

    17 Marketlive CS/Upgrade Raptor FIS-Marketlive

    18 Marketlive CS/Upgrade Filezilla FIS-Marketlive

    19 Marketlive CS/Upgrade WinSCP FIS-Marketlive

    20 Marketlive CS/Upgrade Putty FIS-Marketlive

    21 Marketlive CS/Upgrade SOAP UI 1.6 FIS-Marketlive

    22 Marketlive CS/Upgrade apache-maven-2.2.1 FIS-Marketlive

    23 Marketlive CS/Upgrade Glassfish FIS-Marketlive

    24 Marketlive CS/Upgrade Resin FIS-Marketlive

    25 Marketlive CS/Upgrade RSA token Marketlive

    26 Marketlive CS/Upgrade JIRA Marketlive

    27 Marketlive CS/Upgrade PSA Marketlive

    28 Marketlive CS/Upgrade Marketlive MailBox Marketlive

    29 Marketlive CS/Upgrade Edit Plus FIS-Marketlive30 Marketlive CS/Upgrade Text Pad FIS-Marketlive

    31 Marketlive CS/Upgrade Notepad++ FIS-Marketlive

    32 Marketlive CS/Upgrade Beyondcompare FIS-Marketlive

    33 Marketlive CS/Upgrade Araxismerge FIS-Marketlive

    34 Marketlive CS/Upgrade Winmerge FIS-Marketlive

    35 Marketlive CS/Upgrade Mozila FIS-Marketlive

    36 Marketlive CS/Upgrade Chrome FIS-Marketlive

    37 Marketlive CS/Upgrade Safari FIS-Marketlive

    38 Marketlive CS/Upgrade Web Ex FIS-Marketlive

    39 Marketlive CS/Upgrade WinRar FIS-Marketlive

    40 Marketlive CS/Upgrade Queue Browser Light FIS-Marketlive41 Marketlive CS/Upgrade Tomcat 7 FIS-Marketlive

    42 Marketlive CS/Upgrade RabbitMQ FIS-Marketlive

    43 Marketlive CS/Upgrade ActiveMQ FIS-Marketlive

    44 Marketlive CS/Upgrade Cygwin FIS-Marketlive

    45 Marketlive CS/Upgrade Windows 7 FIS-Marketlive

    46 Marketlive CS/Upgrade Windows XP FIS-Marketlive

    47 Marketlive CS/Upgrade Anthill Marketlive

    (Business application, syst

  • 7/28/2019 Isms Air Ggn

    14/18

    1 Marketlive CS/Upgrade ML Team shared drive

    2 Marketlive CS/Upgrade FIS Sharepoint CHD

    3 Marketlive CS/Upgrade US Sharepoint portal (Client)

    4 Marketlive CS/Upgrade Server for the project

    5 Marketlive CS/Upgrade MS SQL server - licensed copy installable file

    6 Marketlive CS/Upgrade Information in the local desktops

    7 Marketlive CS/Upgrade Information in the local laptops

    8 Marketlive CS/Upgrade Marketlive Intranet/Wiki

    9 Marketlive CS/Upgrade PST files in the local desktop/laptop

    1 Marketlive CS/Upgrade Manuals

    2 Marketlive CS/Upgrade Documentation

    3 Marketlive CS/Upgrade Training Documents

    4 Marketlive CS/Upgrade Testing Documents

    1 Marketlive CS/Upgrade Desktops

    2 Marketlive CS/Upgrade Laptops

    3 Marketlive CS/Upgrade PSTN phone

    4 Marketlive CS/Upgrade Avaya phones

    5 Marketlive CS/Upgrade Printer (Shared)

    6 Marketlive CS/Upgrade Shredder Bins (common)

    7 Marketlive CS/Upgrade VPN Keys

    1 Marketlive CS/Upgrade Sr. Tech Lead

    2 Marketlive CS/Upgrade Tech Lead/ Team Lead

    3 Marketlive CS/Upgrade IT Specialist

    (computing, telecommunications, heating, li

    (databases, data files, system documentation, user manuals, training material, operational an

    (Contracts, company documentati

    (buildings, networking equipment, security devic

  • 7/28/2019 Isms Air Ggn

    15/18

    Asset Location Details (Optional) Confidentiality

    Respective Desktop and Laptop Email client NA

    Respective Desktop and Laptop Office application NA

    Respective Desktop and Laptop PDF reader NA

    Respective Desktop and Laptop Flash Player NARespective Desktop and Laptop VPN client NA

    https://secf.aceproject.com/Tab.asp?Tab=1 Project Management and time trackin NA

    Respective Desktop and Laptop CVS NA

    Respective Desktop and Laptop Repository Tool NA

    Respective Desktop and Laptop IDE for Java NA

    Respective Desktop and Laptop Build and deployment tool NA

    Respective Desktop and Laptop Java development kit NA

    Respective Desktop and Laptop Database NA

    10.164.137.2 RDBMS - For Servers NA

    Respective Desktop and Laptop RDBMS - Freeware - For Local NA

    Respective Desktop and Laptop Client for viewing the oracle databaseNA

    Respective Desktop and Laptop Database Client NA

    Respective Desktop and Laptop Database Client NA

    Respective Desktop and Laptop Tool for accessing the ftp sites NA

    Respective Desktop and Laptop Remote accessing tool for Linux mac NA

    Respective Desktop and Laptop Remote accessing tool for Linux mac NA

    Respective Desktop and Laptop Webservice tool NA

    Respective Desktop and Laptop Build and deployment tool NA

    Respective Desktop and Laptop Appliaction Server NA

    Respective Desktop and Laptop Appliaction Server NA

    Respective Desktop and Laptop RSA key generator software NA

    http://issuetracker.marketlive.com Bug tracking tool NA

    https://psa.marketlive.com Ticketing portal/ Marketlive time man NA

    https://mail.marketlive.com Google apps for accessing the Marke NA

    Respective Desktop and Laptop Editor NARespective Desktop and Laptop Editor NA

    Respective Desktop and Laptop Editor NA

    Respective Desktop and Laptop file comparison tool NA

    Respective Desktop and Laptop file comparison tool NA

    Respective Desktop and Laptop file comparison tool NA

    Respective Desktop and Laptop Browser NA

    Respective Desktop and Laptop Browser NA

    Respective Desktop and Laptop Browser NA

    Respective Desktop and Laptop Call Conferenceing Software NA

    Respective Desktop and Laptop File/ Folder Zip Software NA

    Respective Desktop and Laptop NARespective Desktop and Laptop Appliaction Server NA

    Respective Desktop and Laptop Enterprise Messaging System NA

    Respective Desktop and Laptop Message Broker Tool NA

    Respective Desktop and Laptop Linux Environment for Windows NA

    Respective Desktop and Laptop Windows OS NA

    Respective Desktop and Laptop Windows OS NA

    https://builds.marketlive.com Web based Build and deployment tooNA

    Software Assets

    m, knowledge management application, development tools, utilities)

    https://secf.aceproject.com/Tab.asp?Tab=1http://issuetracker.marketlive.com/https://psa.marketlive.com/https://mail.marketlive.com/https://builds.marketlive.com/https://builds.marketlive.com/https://mail.marketlive.com/https://psa.marketlive.com/http://issuetracker.marketlive.com/https://secf.aceproject.com/Tab.asp?Tab=1
  • 7/28/2019 Isms Air Ggn

    16/18

    ftp.titania.marketlive.com

    Marketlive ftp server containing

    shared documents/softwares.

    Managed by Marketlive. Medium

    http://intranetchd.fnfis.com

    SPS server containing projectspecific documents and

    communication. Managed by FIS

    individual project teams. Low

    High

    \\10.164.137.12\ML Data

    Process documents, general

    documents, training guides,

    softwares, licence keys, database

    dumps Low

    \\10.164.137.12\ML Data Low

    Respective Desktop Medium

    Respective Laptops Medium

    https://intranet.marketlive.com Marketlive knowledgebase. High

    Medium

    Medium

    Medium

    Medium

    Medium

    Respective Desktop NA

    Respective Laptop NA

    Respective Desks NA

    Respective Desks NA

    NA

    NA

    NA

    FIS Gurgaon NA

    FIS Gurgaon NA

    FIS Gurgaon NA

    Services

    hting, gas, water, air conditioning, intruder alarms, fire control, generators, UPS. Etc)

    People

    (Personnel and contractors)

    Information Assets (Soft Copy)

    support procedures, software licenses, installation media, business continuity plans, contracts, g

    business results, HR records etc)

    Paper Documents (Hard Copy)

    on, business results, purchase document, invoices, license agreement etc)

    Infrastructure Assets

    s, backup media, software media, printers, biometric devices, server racks, desktops etc)

    ftp://ftp.titania.marketlive.com/http://intranetchd.fnfis.com/http://localhost/var/www/apps/conversion/tmp/scratch_2//10.164.137.12/ML%20Datahttp://localhost/var/www/apps/conversion/tmp/scratch_2//10.164.137.12/ML%20Datahttp://localhost/var/www/apps/conversion/tmp/scratch_2//10.164.137.12/ML%20Datahttp://localhost/var/www/apps/conversion/tmp/scratch_2//10.164.137.12/ML%20Datahttp://localhost/var/www/apps/conversion/tmp/scratch_2//10.164.137.12/ML%20Datahttp://localhost/var/www/apps/conversion/tmp/scratch_2//10.164.137.12/ML%20Datahttp://intranetchd.fnfis.com/ftp://ftp.titania.marketlive.com/
  • 7/28/2019 Isms Air Ggn

    17/18

    Integrity Availability

    Medium High

    Low Medium

    Low Low

    Low LowHigh High

    Low Low

    High High

    High High

    High High

    High High

    High High

    High High

    High High

    Medium High

    Low Low

    Medium Medium

    Medium Medium

    Medium Medium

    Medium High

    High High

    Medium Medium

    High High

    Medium Medium

    Low Low

    High Medium

    High High

    High High

    High High

    Medium HighLow Low

    Low Low

    Low Low

    Medium High

    Low Low

    Medium Medium

    Medium Medium

    Medium Medium

    Low Medium

    Low Medium

    Low LowHigh High

    High High

    High High

    High High

    High High

    High High

    Low Low

  • 7/28/2019 Isms Air Ggn

    18/18

    Medium Medium

    Low Low

    High High

    Low Low

    Low High

    High High

    High High

    High High

    High High

    Medium Medium

    Medium Medium

    Medium Medium

    Medium Medium

    NA High

    NA Medium

    NA Low

    NA Medium

    NA Low

    NA Low

    NA High

    NA High

    NA High

    NA High

    uidelines, company documentation,