Report and contain cyber incidents and personal data breaches

Classify each security event against CERT-In reportable categories and personal data breach rules, and link containment actions, preserved logs and timestamps to each report. Information Security can notify CERT-In, the Data Protection Board, affected individuals and clients and close remediation with evidence.

Starts when

Detection or notification of a suspected security incident, including one at a client or subcontractor affecting data the company processes.

Runs: Per incident; several times a year in a mid-size firm, with alerts screened daily.

People in the process

IInformation SecurityProcess Owner
SSecurity OperationsParticipating Team
LLegalParticipating Team
IInternal AuditParticipating Team

The process is a starting point. The standards are yours.

Configure for the engagement, client requirements, data involved and applicable export-reporting scope. Contract, security and employment decisions use your approved review process.

Keep the work connected.

Finance

Reconcile approved timesheets to client invoices and unbilled revenue

For time-and-material engagements, price approved hours at the contracted rate card and match them line by line with draft invoices, allocations and change requests. Finance can bill every supportable hour, approve write-downs and carry the rest as unbilled revenue at close.

DRCF

Treasury

Realise export proceeds and close export of services declarations

Match each foreign-currency export invoice to its Letter of Undertaking, export declaration, inward remittance and bank realisation advice or FIRC. Treasury can close realised declarations, seek extension or write-off for overdue amounts and give Tax the records for GST returns and refunds.

TFAF

Human Resources

Verify statutory dues paid by manpower and subcontracting vendors

Check vendor wage registers, provident fund and ESI challans and proof of wage payment against the certified deployed headcount and the wages billed. Accounts payable can release each invoice on HR clearance or withhold unpaid dues, with proof kept for inspections and assessments.

PFVFL

Explore all IT & services processes.

Order for the work. Room for the people.