IBM Daksh Business Process Services : Self Assessment for Privacy & Security

For any organization Risk Management can be a challenging task & if coupled

with complex technological infrastructure, multiple locations and geographies,

and diverse customer expectations, it may prove to be cumbersome. Risks may be

related to financial, people, technological or compliance, and if handled

improperly, may lead to legal issues and liabilities. The specialist Risk &

Compliance team of the company were able to conduct risk assessments when the

organizations were small with few clients. They were also able to provide

assurance to the management & train employees on security policies and

practices. But as the organizations grew and expanded in size, the complexities

in contracts along with increased compliance requirements & liabilities also

increased. Thus this project was introduced that besides helping in reducing

risks, provide value addition to the clients by recommending new tools &

mitigating controls.

It includes commonly expected controls from the clients who processes handling

sensitive personal information (SPI) like credit card numbers, health

information & other financial data. One key benefit achieved by this project

comprises of visibility of enterprise wide risks to senior leadership,

proactively identification of organizational risks and timely mitigation thus

safeguarding the interest of IBM & its clients