Top Banner
Page 1 of 42 QSG-DSP Ver 1.1 RBEI © This is the exclusive property of Robert Bosch Engineering and Business Solutions Limited. Without their consent, it may not be reproduced or given to third parties. 17/02/2011 Internal document.xls ISP Concepts Ready Reckoner Status: Approved Approved by: BSH Released by: Srihari P Internal Revision History Version Date Author Modifications 1.0 22./04/11 Srihari Initial Version
42
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Copy of BSS DSP Ready Reckoner

Page 1 of 42

QSG-DSP Ver 1.1RBEI

© This is the exclusive property of Robert Bosch Engineering and Business Solutions Limited. Without their consent, it may not be reproduced or given to third parties.

17/02/2011Internal document.xls

ISP Concepts Ready Reckoner

Status: Approved

Approved by: BSHReleased by: Srihari P

Internal

Revision History Version Date Author Modifications1.0 22./04/11 Srihari Initial Version

Page 2: Copy of BSS DSP Ready Reckoner

Topics

For details click the required link

If you have any Request apart from the above please contact your DSP or drop a mail to RBEI/BSS-DSP

BSS-DSP Team

BAN DSP BSI - Bhaskar Suresh Illa BSN - Vishwanath Basavaraj Angadi BSR - Jagadish Babu Logisetti

If you are not able to reach the above DSP's please contact Ananya Mishra

BSS - ISP Documents

New Associates

Password Reset ,Unlock and Extent Validity for Leave Management System

Encryption facility

BoCo Registration and Unregistration

SAP Logon Pad Access

Admin access

Internet Access

USB Access

RASVPN Connection

Interwise Moderator Access

Software Clearing

Backup and Archival

Data Recovery and CD/DVD Write Request

Associate Exit/Transfer

Page 3: Copy of BSS DSP Ready Reckoner

BSS ISP Documents

Please read the following documents without fail from the below link

Open the file name mentioned below to read the document from the above linkBSS - Information security concept. BSS_InformationSecurityConcept

BSS - Emergency Concept BSS_Emergency_Concept

Click the link to get the document

RBEI - ISP Policy

Encryption

Clean Desk

Guidelines for Laptop user

Information Classification

Usage of Bosch IT Equipment

CERT

Intellectual Property Rights

Password Rules

Link to BSS ISP Intranet documents

Link

Link

Link

Link

Link

Link

Link

Link

Link

Page 4: Copy of BSS DSP Ready Reckoner

BSS ISP Documents

Back to Topics

Page 5: Copy of BSS DSP Ready Reckoner

Details for New associates.

1

2

3

4

5

6

7

Page 6: Copy of BSS DSP Ready Reckoner

Details for New associates.

For Printer Access : a) Get printer server name form your neighbors. b) Call 3311 for creating a ticket to get securejet PIN number. c) Once you get the PIN number configure the printer in your system

ISP Web based training

Data Labelling

BSS ISP Training documents

Travel Management Request can be raised through Employee service. Employee service --> General --> Travel Mgmt. System --> Request for Creation of UserID.

How to do mail and file Encryption

LMS and Portal will be activated by "RBEI-IdM User Administrator" team. If it is not activated send mail to "RBEI-IdM User Administrator" with your NT ID

New associate should complete web based training on ISP(section 2) and Data Labelling(section 3) , read "BSS_InformationSecurityConcept" atleast once which is provided in the link under section 4.

http://www.intranet.bosch.com/isp/wbt/WBT_IT-Security/index.htm

\\missl_nts2\info\DSO\90_DSO_Share\BGN\Info_classification_Source\index.html

\\Bmh2fs01\Bmhapp01_projects\ISY3\BSC_Info_All\Knowledge Repository\Data Security Traning\Intranet

click here for details

Back to Topics

Page 7: Copy of BSS DSP Ready Reckoner

Back to Topics

Page 8: Copy of BSS DSP Ready Reckoner

Password Reset ,Unlock and Extent Validity for Leave Management System

1

2

Page 9: Copy of BSS DSP Ready Reckoner

Password Reset ,Unlock and Extent Validity for Leave Management System

Click the below link

The options are available in topic Identity Management (IdM) under section 'End User 'Change Password' 'Unlock my SAP account'.Note: If you are Unlocking or extending your LMS accounts do the following steps on same day without fail.

Step 1. Change the password. Step 2. Login into LMS.

Further, if you could not see your Ntid on SAP (LMS) screen after login into LMS, please contact the following persons with the screen shot. Ms. FIXED-TERM Sheetal Anwekar(RBEI/BSP HRL-M support) or Ms. Vani Prasad (RBEI/HRL3-M).

IDM Navigation path provided below

Please also reset your password after extending the validity.

https://inside-wiki.bosch.com/confluence/display/idmfaq/Home

My Work > Management & Support > Associate Services > Leave & Attendance > Overview > LMS Password Reset > Unlock ( select SAP checkbox named logsysp011) and extend validity

If you do not have the SAP checkbox option in the password reset page, please contact your DSP to add the SAP resource to your account.

If you find a green color clock-wise arrow symbol, it shows that your request is in process and still needs to be approved. please check with DSP for approval of previous request and then try extending validity.

Page 10: Copy of BSS DSP Ready Reckoner

Back to Topics

Page 11: Copy of BSS DSP Ready Reckoner

Encryption facility

1

2

3

ab4

5

Page 12: Copy of BSS DSP Ready Reckoner

Encryption facility

Use below link for first time application for encryption

In case of recovery of email encryptionPIN Letter exists, select option a else option b

Relocation rules for email and file encryption

Email encryption for business partners

Application in below format for RAS connection to external business partners

More info on Secude Secure mail/file

More info on Notebook Encryption

https://sec-selfservice.de.bosch.com/application/en/start.aspx

Once the request for encryption facility is raised, collect the PIN letter from the distribution office to activate email encryption (Registration at RB-TrustCenter)https://sec-selfservice.de.bosch.com/enroll/start.html

https://sec-selfservice.de.bosch.com/enroll/start.htmlhttps://sec-selfservice.de.bosch.com/pinletter_application/en/start.aspx

https://inside-ws.bosch.com/FIRSTspiritWeb/wcms/wcms_st/media/en/st/organization/communication_center/documents_1/rb_trustcenter/Rules_Certtransfer_V_1_0.pdf

https://inside-ws.bosch.com/FIRSTspiritWeb/wcms/wcms_st/media/st/organization/communication_center/documents_1/rb_trustcenter/en/Encrypted_E-Mail_Communication_with_Business_Partners_1_2.pdf

https://inside-ws.bosch.com/FIRSTspiritWeb/wcms/wcms_st/media/st/organization/communication_center/documents_1/rb_trustcenter/en/AuftragSchluesselfuerGeschaeftspartner_en.doc

https://inside-ws.bosch.com/FIRSTspiritWeb/permlink/wcms_ci_-topic_xy_72-EN

https://inside-ws.bosch.com/FIRSTspiritWeb/permlink/wcms_ci_-topic_xy_73-EN

Encryption facility should be availed and used by all associates for corporate email correspondence which is both confidential and binding

Back to Topics

Page 13: Copy of BSS DSP Ready Reckoner

Back to Topics

Page 14: Copy of BSS DSP Ready Reckoner

Steps for BoCo Registration and Un-registration

1

2

34

5

Page 15: Copy of BSS DSP Ready Reckoner

Steps for BoCo Registration and Un-registration

Pre-requisites for BoCo registrationUsage of BoCo requires a client Software to be installed on the PCGr.M approval for getting BoCo before going in for DH approvalUser registration needs Department Head approval (due to monthly charges involved for BoCo usage)

Process for registration and un-registration is via WorkONPlease follow the BSS Specific work flow mentioned below, else your request will be rejected by DH

User Help for rating a WorkON workflow: (refer page 4)

Procedure for BoCo ActivationRefer Sec 4.2.

Note : Navigation path for creating :workon" given below

Registration:

Workflow needs to be created in the BGN portal tool “WorkON”, as follows:

User--> User's Gr.M-->User’s DH--> Sreekumar C R (CI/FSR1-IN); cc: Swaroop Kunja (RBEI/ICO)

Un-Registration:

Workflow needs to be created in the BGN portal tool “WorkON”, as follows:

User --> Sreekumar C R (CI/FSR1-IN); cc: Swaroop Kunja (RBEI/ICO)

(DH approval not needed for un-registration)

\\missl_nts2\rbin_qms\Corporate_Process\Information_Coordination\QMS2_Procedures\QSP_ICO-BOCORegistrationUnregistrationProcedure.doc

Back to Topics

Page 16: Copy of BSS DSP Ready Reckoner

Back to Topics

Page 17: Copy of BSS DSP Ready Reckoner

Steps for getting admin privileges for desktop/laptops

1

23

4

5

Steps for revoking admin privileges for desktop/laptops1

2

3

Page 18: Copy of BSS DSP Ready Reckoner

Steps for getting admin privileges for desktop/laptops

Enabling of admin access will happen thru peacy installation

If you had applied for admin access to update your SAP Log-On pad, follow the instructions provided in the

If admin access was not removed by using the above procedure DSP will remove it during audits.

Steps for revoking admin privileges for desktop/laptopsAs per BSS ISP as associate can have admin access for 2 days. After this time period, below step to be initiated by user of the system

If you had applied for admin access to update your SAP Log-On pad, follow the instructions provided in the below link

Please raise request through IT services for getting admin access

Please select under newscale(MY IT services) -Computer hardware--->Request Administrative Rights to Computer--->select others--->IN Business Justification Type "Admin access required " and mention the reason that why you need admin access.Refer the attachment word document for raising the IT services request for admin access

the Link by doing this user will be able to add SAP system in Log-on pad without admin access.

If the system was infected with Virus and due to that Admin and USB access was removed then reapproval is mandatory from GrM and DH.

SAP-Log-on pad access by doing this user will be able to add SAP system in Log-on pad without admin access.

User to send mail to local admin team with the subject line "Deactivate Admin privileges - machine name"[email protected]

Note: Normally admin access requests will be processed within 2 days of requested date by local admin team. If needed urgently, associate to follow-up with local admin team to get it immediately

Admin access for a system on a continuous basis requires approval from DH and Mr.Stanley Christopher to be marked in mails for such requests

Back to Topics

Page 19: Copy of BSS DSP Ready Reckoner

IT services Request help

Back to Topics

C:\Documents and Settings\jas1cob\Desktop\procedure for Admin and USB access.doc

Page 20: Copy of BSS DSP Ready Reckoner

Steps for getting internet access for desktop/laptops (internal users*)

1

2

3

4

5

6

7

8

9

10

11

Page 21: Copy of BSS DSP Ready Reckoner

Steps for getting internet access for desktop/laptops (internal users*)

Pre-requisite for getting internet access: Internet to be used only for official/project purposes only by associatesComplete ISP WBT e-learning and certificate of completion to be available before applying for internet access

Fill the internet access request form

Fill the obligation form

Work station Audit:click the below link to complete the work station audit. This will be stored in "c:\isp_report.html"

Associate to sign in the confirmation by user placeholder ( Point No. 1 in the sample attachment )

Send encrypted mail to your DSP with ISP WBT training certificate or Screen shot of ISP training information from your

Produce the Internet application hard copy to DSP for getting His/Her signature. ( Point No. 2 in the sample attachment )

After getting DSP signature get signature from your GrM. (Point No. 3 in the sample attachment )

Scan the hard copy and send it in mail to your DH.

DH will insert his/her digital signature and forward it to RBEI-Internet Access Request (CI/ISY1-IN)

Note: Normally Internet access requests will be processed within 2 days of requested date by local team.

Access to internet will be revoked if more than 1 virus alert is received by user from RBEI-Antivirus team

http://www.intranet.bosch.com/isp/wbt/WBT_IT-Security/index.htm

https://inside-ws.bosch.com/FIRSTspiritWeb/wcms/wcms_corpfunc/media/en/c_isp/downloads_2/doc/cisp_applicationforpermission_wwwintern.doc

Link

training information system , Signed Obligation form and workstation audit HTML file ( available in c:\isp_report.html if point no 4 is performed)

Subject line of the mail to be written as "Internet access request - USER ID"

Back to Topics

C:\Documents and Settings\AHN1KOR\Desktop\CISP_DoO_Employee_Personal_Data.doc

Page 22: Copy of BSS DSP Ready Reckoner

Sample Document

Back to Topics

C:\Documents and Settings\srp5cob\Desktop\Internet_Sample.pdf

Page 23: Copy of BSS DSP Ready Reckoner

Steps for enabling USB port for desktop/laptops

1

2

3

4

6

7

8

Page 24: Copy of BSS DSP Ready Reckoner

Steps for enabling USB port for desktop/laptops

Fill the USB drive undertaking form

Explanation for 1,2,3 on the sample request form.

(1) The duration and reason for the request to be filled by the associate. (2) The associate signature with other details (3) The associate should get His/Her DH's signature

Enabling of the port will happen thru peacy installation

https://inside-ws.bosch.com/FIRSTspiritWeb/wcms/wcms_rgap/media/bosch_in_india/rbei/organization_6/it_services/ci_isy_in/ci_isy1_in/documents_72/topics_16/forms_8/USB_drive_Undertaking.doc

Please raise request through IT services for getting USB access

Please select under newscale(MY IT services) -Workplace services -->Computer hardware--->Request Administrative Rights to Computer--->select others--->IN Business Justification Type "USB access required " and mention the reason that why you need admin access.Refer the attachment word document for raising the IT services request for USB access

Note : Please add the USB obligation form in which you have got the DH's signature as attachment while raising the IT_services request

At any point in time if USB port has to be disabled, please send a mail to local admin team with subject line "Deactivate USB Port - machine name"

If the system was infected with Virus and due to that Admin and USB access was removed then re-approval from GrM and DH is mandatory.

USB port will be disabled for users if more than 1 virus alert is received by user from RBEI-Antivirus team or any NonBosch data storage device is used.

Page 25: Copy of BSS DSP Ready Reckoner

Sample Document

IT services Request help

Back to Topics

C:\Documents and Settings\srp5cob\Desktop\USB_sample.pdf

C:\Documents and Settings\jas1cob\Desktop\procedure for Admin and USB access.doc

Page 26: Copy of BSS DSP Ready Reckoner

Steps for enabling RASVPN for Laptops (CoRASon)

1

2

3

4

5

6

Page 27: Copy of BSS DSP Ready Reckoner

Steps for enabling RASVPN for Laptops (CoRASon)

Request RASVPN access thru eWorks. Refer below link for procedure

Link to eWorks application

Fill the declaration of obligation for RASVPN which is available in the below link

Send the declaration of obligation scan copy to DSP to avoid rejection

Always attach declaration of obligation of RASVPN in eWorks while initiating a request for RASVPN

Configure BSS Specific Workflow in eWorks as per the process mentioned in the link (Step-1)Please follow BSS Specific Work to avoid rejections.User--> User's Gr.M-->User’s DH CC to User's DSP --> RBEI ICO

Final work flow should be as shown below

Link to RAS VPN Application Procedure

https://rb-eworks01.de.bosch.com/eworksqi/frame.asp

Link to RAS VPN Application Procedure

Note : Please enter YOUR Group Manager , Department Head and DSP Name. Do not repeat the same names given below. The below is an example

Back to Topics

your department DSP mail ID

Page 28: Copy of BSS DSP Ready Reckoner

Back to Topics

Page 29: Copy of BSS DSP Ready Reckoner

Steps to get interwise moderator access

1

2

3

4

5

6

8

EinrichtungModRechteIwEN_Inter...

Page 30: Copy of BSS DSP Ready Reckoner

9

Page 31: Copy of BSS DSP Ready Reckoner

Steps to get interwise moderator access

Pre-requisite for getting interwise moderator access: User Should have access to BGN Portal account , if not contact your DSP.Fill in the attached form to get the interwise moderator access (charges involved)

IDM Administrator will place a request to add Interwise to your Portal Account

User Will receive automated mail once the request is approved.

Using the following path , user has to create a password for Interwise account

Sign and submit the BOSCH virtual conferencing obligation form to DSPhttps://inside.bosch.com/irj/go/km/docs/guid/90a7a2f7-d534-2d10-db87-82e4aec51b52

Click myAT&T available in your task bar. Enter your NT ID and the Interwise password which user had set in IDM.

EinrichtungModRechteIwEN_Inter...

Page 32: Copy of BSS DSP Ready Reckoner

Enter User ID & Password which you had entered in IDM interwise.Click Login to use the applicatoin.

Page 33: Copy of BSS DSP Ready Reckoner

Back to Topics

Page 34: Copy of BSS DSP Ready Reckoner

Steps for checking if a software product/application is approved/rejected by RBEI

1

2

3

3

Page 35: Copy of BSS DSP Ready Reckoner

Steps for checking if a software product/application is approved/rejected by RBEI

Check in below link if an open source/freeware could be used or is restricted from use using below link

Use below request form to raise a new request for evaluation of a software

Software clearing Process

Procedure for creating WorkON (Refer Sec 4.1)

Usage of freeware/open source without proper approval will be noted as a non-conformance during audits

http://www.intranet.bosch.com/app/swc/csc/csc_start.aspx

file://missl_nts2\rbin_qms\Corporate_Process\Information_Coordination\QMS3_Template\QST_Software_Clearance_Request.dot

file://missl_nts2/rbin_qms/Organisation/Business_Process_Architecture/Support_Processes/SP5_Information%20Systems%20&%20Management/SP5_SWClearance.xls

file://missl_nts2\rbin_qms\Corporate_Process\Information_Coordination\QMS2_Procedures\QSP_SW_Clearance.doc

Page 36: Copy of BSS DSP Ready Reckoner

Back to Topics

Page 37: Copy of BSS DSP Ready Reckoner

Steps for data backup and archival

1

2

3

Steps for data recovery

1

Page 38: Copy of BSS DSP Ready Reckoner

Steps for data backup and archival

Backup of workstationsPre-requisites

Recommendation

Fill the above form , get signature form GrM and DSP , create a ticket with this request.Project Closure Archival

d) Two copies of achieved data would be stored in fire-proof cabinet which is kept in CI/ISY1-IN with labelling.

Steps for data recovery

In case there is any loss of data, use below form to raise a request for data recovery

e) Mock recovery records and logs (system generated) are maintained at central folder in identified server

(a) User should ensure U drive has to be mapped as “username$” on Server name.

Where Servername is:- KOR2FS02 for Koramangala and Bommanahalli COB2FS01 for Coimbatore

Users are requested to use U drive for data storage (e.g. latest Outlook pst files, temporary work files etc) instead of local disks on workstations and access the data directly from U drive.In U drive, folders like pki_data, log and peacy will be created automatically which are required to run Peacy environment, Email encryption etc.,Do not delete the existing system created folders like pki_data, log and peacy folders from U Drive.

In case there are requirements to transfer data onto CD/DVD for data backup permanently, use below form and raise a hotline request

file://missl_nts2\rbin_qms\Corporate_Process\Information_Systems\QMS3_Forms\QSF_CD_Writer_Usage_Request.dot

a) Data archiving of project closure artefacts shall be done on a CD/DVD or magnetic tape. The media shall be provided by CI/ISY1-IN department after project representative (as per the project plan) submits an approved request including DSP. The responsibility of archiving onto CD/Tape lies with data owner or project representative.

b) The project representative will be informed by CI/ISY1-IN department to copy the Project Archival data in to a PC/Server where the archiving device is connected.

c) If the archive file size is greater than 4 GB, CI/ISY1-IN department shall have a discussion with the project team to decide if the data could be split into multiple CDs / DVDs for archiving. Where data cannot be split into multiple CDs or DVD, archiving shall be done on a magnetic tape.

e) Once the CI/ISY1-IN department receives a confirmation from the project team, project data copied in the server shall be deleted either by CI/ISY1-IN department or by the project team.

file://missl_nts2\rbin_qms\Corporate_Process\Information_Systems\QMS3_Forms\QSF_RecoveryReq.dot

a) The recovery request has to be done by sending a ‘Recovery Request Form’ via e-mail with a copy to user’s superior ( minimum Project Manager level)

b) Recovered data should be retrieved on alternative server path. This is to avoid accidental overwriting of valid latest information. Responsibility to copy the recovered data to productive data is responsibility of data owner.

d) CI/ISY1-IN will conduct mock recovery of monthly tapes once a month and yearly tape once in 6 months to ensure data integrity on tapes.

Back to Topics

Page 39: Copy of BSS DSP Ready Reckoner

Back to Topics

Page 40: Copy of BSS DSP Ready Reckoner

Steps for initiating exit/transfer for an associate

1

2

3

4

5

6

Page 41: Copy of BSS DSP Ready Reckoner

Steps for initiating exit/transfer for an associate

Also User deletion request to be raised in case of exit of associates (For transfer if applicable or insisted only)

Before approaching DSP for Signature in Exit checklist complet the following points.

Stanley Christopher (CI/FSR1-IN) FIXED-TERM Supriya Srinivas (CI/ISY-IN Sekr) Purushotham K (CI/FSR1-IN) CC to your DSP and FIXED-TERM Smitha T D (RBEI/BSS-Sekr)

After getting signature from DSP and Project manager, get signature from FCM security also.

Send the scanned copy to DSP and submit the hard copy to HRL during your Exit interview.

‘Exit and Transfer Checklist’ should be used in the department during exit, transfer, termination of employees, externals and third parties as a part of clearance and transfer procedure

Associate either getting transferred to other department or leaving the organization should fill the check items in the below mentioned checklist

\\missl_nts2\rbin_qms\Corporate_Process\Information_Security\QMS3_Checklists\QSC_Associate_Transfer_Exit.doc

file://missl_nts2\rbin_qms\Corporate_Process\Information_Systems\QMS3_Forms\QSF_UserAccDel.dot

1) Fill the user account deletion form(as shown in sample document) get Signature from your GrM and send the scanned copy to with sibject line "Clearance for User Account Deletion : <Your NTID>"

2) Send mail to FIXED-TERM Smitha T D (RBEI/BSS-Sekr) requesting to removing your name in all distribution list with CC to DSP with sibject line "Modification in Distribution list : <Your NTID>"

3) Send mail to Your Project managet requesting to remove access to project folder and delete your SAP User ID which you had used in your project with CC to DSP and subject line "SAP User ID Deletion : <Your NTID>"

C:\Documents and Settings\srp5cob\Desktop\User_Account_Deletion.pdf

Page 42: Copy of BSS DSP Ready Reckoner

Sample Document

Back to Topics

C:\Documents and Settings\srp5cob\Desktop\User_Account_Deletion.pdf