Deloitte & Touche Assurance and Enterprise Risk Service

cmmirz

13年 ago

Sampling Summary： （抽样汇总）

Sampling Factors:	Location (Not Relevant: Same basic unit sometimes spanning across locations. Work is mainly performed and managed at Hyderabad location. Some resources can work from other locations Gurgaon and Bangalore. Not a critical sampling factor.) Customer (Not Relevant: Projects are broadly based on QMS and minor differences taken care of by tailoring; Not a critical sampling factor.) Size (Not Relevant: Size does not have any significant impact on how work gets done other than some tailoring.) Organizational Structure: Organization has different groups which is likely to have influence on the process and outcomes. Type of Work (Not Relevant: Within each group, work performed is similar.)
Sampling Factor Values:	IAM (Organizational Structure): Identity & Access Management basic units EAI (Organizational Structure): Enterprise Application Integrity basic units CT&VM (Organizational Structure): Cyber Threat & Vulnerability Management basic units AMS (Organizational Structure): Application Management Services basic units I&TRM (Organizational Structure): Information & Technology Risk Management basic units
Subgroups:	IAM: Identity & Access Management practice addresses all aspects of the identity and access management lifecycle. 34 People, 6 Basic Units – IAM I&TRM: Information & Technology Risk Management services address an organization’s business security requirements and supporting strategies and architectures for establishing an enterprise-level security and risk management program. Team assists with data protection issues, such as helping to make sure their data remains secure. 58 People, 3 Basic Units – I&TRM EAI: As organizations rely ever more heavily on enterprise resource planning (ERP) systems and other information and communications technologies, the risks associated with them escalate rapidly. Enterprise Application Integrity team brings specialized skills and experience to your ERP environment, including a deep understanding of segregation of duty requirements, leading practices, the current regulatory environments, and Segregation of Duty and Controls (SOD) vendor technologies. 70 People, 5 Basic Units – EAI CT&VM: Cyber Threat and Vulnerability Management assists our clients in assessing application and network environments to identify vulnerabilities and control weaknesses within information systems and the computing infrastructure. 11 People, 4 Basic Units – CT&VM AMS: The Security Application Management Services (Security AMS) practice delivers functional and technical capabilities across a global platform to continuously deliver on client IT Security Application Management specific services. 25 People, 5 Basic Units – AMS