Vishal Kumar Singh heads cyber security operations at FCB India.
Key security initiatives
FCB India developed ENCompass tool which generates all the reports automatically. The tool has capability to query the active directory, compare pdf files, execute PowerShell, etc. The dashboard of the tool gives the status of all audit control in one go. All the required parameters like application name, server names, locations, control listing etc. are maintained in the tool.
Based upon the logic, 15 days before the quarter the tool starts sending alerts to control owners. Control owners will verify the reports and if any discrepancy is found, they will take necessary action and re-run the report. Once the report is okay, the process owners will click on ‘verify’ tab which triggers alert to the first level approver.
If the approver finds any discrepancy they can reject the report, and alert will be triggered to the control owner. If any one of the above fails to approve/verify within five days, an alert will be triggered to the IT head. If any of the above responsible person is on leave, the access can be easily changed from one approver to another.