Gujrat Urja Vikas Nigam (GUVNL) : GUVNL ISMS Project

The key concept of Information Security Management System (ISMS) for an
organization is design, implementation and to maintain a coherent suite of
processes and systems for effectively managing information accessibility. As
with all management processes, an ISMS must remain effective and efficient in
the long term, adapting to changes in the internal and external environment.
ISMS involves providing independent evaluations of an organization's current
systems, policies, procedures, and practices for safeguarding electronic
information from loss, damage, unintended disclosure or denial of availability.
As a part of Power Reform Process, the Electricity Act, 2003 was passed by the
Central Govt. This was followed by Gujarat Electricity Industry (Re-organization
& Regulation) Act, 2003 passed by the Govt of Gujarat to restructure the
electricity industry with an aim to improve efficiency in management. In order
to centralize the control of GUVNL's IT assets, team of ISMS consultants was
approached. This team carried out Gap Analysis of existing IT infrastructure of
GUVNL to find out security gaps. The recommendations for risk mitigation of
existing security gaps were submitted and presented to GUVNL, wherein
recommendations of top priority-high risk observations were suggested for
implementation of Active Directory Services, Enterprise management system
including Desktop, Server & Network Management Solutions, Firewall & Intrusion
Detection System (IDS) Solution, Anti-Virus Solutions, etc.