IBM Daksh Business Process Services : Self Assessment for Privacy & Security

For any organization Risk Management can be a challenging task & if coupled
with complex technological infrastructure, multiple locations and geographies,
and diverse customer expectations, it may prove to be cumbersome. Risks may be
related to financial, people, technological or compliance, and if handled
improperly, may lead to legal issues and liabilities. The specialist Risk &
Compliance team of the company were able to conduct risk assessments when the
organizations were small with few clients. They were also able to provide
assurance to the management & train employees on security policies and
practices. But as the organizations grew and expanded in size, the complexities
in contracts along with increased compliance requirements & liabilities also
increased. Thus this project was introduced that besides helping in reducing
risks, provide value addition to the clients by recommending new tools &
mitigating controls.

It includes commonly expected controls from the clients who processes handling
sensitive personal information (SPI) like credit card numbers, health
information & other financial data. One key benefit achieved by this project
comprises of visibility of enterprise wide risks to senior leadership,
proactively identification of organizational risks and timely mitigation thus
safeguarding the interest of IBM & its clients