Guidewire - BillingCenter System
- 1. DOCUMENT HISTORY Date Revision No Change Reference to Section 11/20/2013 New BillingCenter System
- 2. Guidewire Billing Center System 1 | P a g e T a b l e o f C o n t e n t s PURPOSE ...............................................................................................................................................................2 OBJECTIVES............................................................................................................................................................2 NOTE TO DATA OWNER .........................................................................................................................................2 IS SERVICE LEVEL AGREEMENT EXPECTATION ........................................................................................................3 GENERAL INFORMATION .......................................................................................................................................3 REPORT DETAILS....................................................................................................................................................3 JIRA REQUIREMENTS .............................................................................................................................................4 REQUIREMENTS HISTORY..................................................................................................................................................4 October 29, 2013 - Original Access Review Audits Requirements....................................................................................... 4 November 12, 2013 - Access Review Audits Requirements Update I.................................................................................. 5 November 13, 2013 - Access Review Audits Requirements Update II................................................................................. 5 FINAL REPORT................................................................................................................................................................6 Access to Producer Master Report - Report Information (Worksheet) ............................................................................... 6 Access to Producer Master Report - Legend (Worksheet)................................................................................................... 7
- 3. Guidewire Billing Center System Department Review 2 | P a g e P u r p o s e The purpose of the Department Review Guidewire Billing Center System document is to identify, review, and maintain processes used in the periodic review of user’s access and their permissions to the system. The document is divided into 6 sections – Objectives, Note to Data Owner, IS Service Level Agreement Expectation, General Information, Report Details, and JIRA Requirements. The Objectives section is to identify how this document is used. The Note to the Data Owner section is specific instruction and guideline to the data owner to help when he receives the reports and who he should send the report to and how the changes are communicated for logging and tracking purposes. The IS Service Level Agreement section is to communicate and ensure an IS SLA level 2 Level 2 status for changes that result from the review process by the data owner as specified in the IS Service Level Agreements itself. The General Information section is to summarize the system reviewed, the review frequency of that system, the governing policy and process flows behind the review, the owners involved in the review, and the last system review date. The Report Detail section is to outline the name and location of the query that generated the report reviewed, the name and location of the report reviewed by the data owner, the report output format, the report distribution, as well as the last created report date. The JIRA Requirements section is to identify all report requirements, report Mock ups, as well as the QA Review Results. O b j e c t i v e s  To serve as a documentation source to quickly assess what was done in the PILOT of the Access Right Review Project;  Identify the components of the department review;  To serve as a template (turnkey) as department reviews are conducted on system after system;  Help determine a timeline for implementing the change with consideration given to current and future projects, and peak business activity schedules;  Contribute to the general improvement of the process. N o t e t o D a t a O w n e r This section is set up to help assist the Data Owner through this new process of performing a department review. We want you to know what is set up, how you fit into the process, and what is expected of you.. Although you are named as the Data Owner for the system, you are not responsible for performing the entire review. There is a 3 week turnaround on this process for the department owner. Obviously you aren’t familiar with all the roles and the people in them, but that you would pass this along to the SME’s in Customer Service, Underwriting, Finance and Sales & Marketing to gather feedback on their suggested changes. If you need any help with this, contact the Audit Team of this process, members, Linda Karl, Manager, Compliance and/or Perry Heckemeyer, Controller. Once you have received responses from these departments with roles/users changes, these changes will be communicated through the Help Desk ticket system – so once you have gathered information, let an Audit Team member know and they will assist you with getting these attached to a HelpDesk ticket so they can make your proposed changes. On the spreadsheet there is both a Legend with all the roles and defined permissions for each role as well as the spreadsheet which has individuals, roles, departments and authority limits. As you can see, there is some default values that were used for roles granting $10m in authority in some instances. These will likely need to be changed as well as roles/individuals. Again, if you would like a walkthrough or further contact Linda or Perry.
- 4. Guidewire Billing Center System Department Review 3 | P a g e I S S e r v i c e L e v e l A g r e e m e n t E x p e c t a t i o n The purpose of this section is to provide the business expectations for role and authorization corrections change requests. According to the IS Service Level Agreements, “incorrect system access” has an IS SLA Level 2 and resolution is 2-4 business days. Additionally, “an employee access change or addition” is an IS SLA Level 3 and resolution is 5-7 business days. The business expectations for such change requests is a resolution within 2 – 7 business days, having an IT Service Level Agreement (SLA) of Level 2, when there are no impact upon other business processes. However, because of the nature of roles and authorizations changes, data owners, who would request such requests, may have to analyze the impact on business processes on a case by case basis prior to requesting these changes. G e n e r a l I n f o r m a t i o n System Name: Guidewire Billing Center Review Frequency: Annually Governing Policy: FS_1047 Corporate Access Management Policy Process Flows: Access Rights Process Flowcharts Initiative Owner: Finance Process Owner: IS Operations Data Owner: Doug Phillips Last Review Date: 11/13/2013 R e p o r t D e t a i l s Query Name: Access to Producer Master Report Query Access to Producer Master Report - Legend Query Query Location: Query Location Report Name: Access to Producer Master Report Report Location: Report Location Output: Excel Delivery Method: Email Distribution List: Data Owner and Audit Team (as defined in the Governing Policy above) Last Created Report: 11/14/2013
- 5. Guidewire Billing Center System Department Review 4 | P a g e J I R A R e q u i r e m e n t s JIRA Requirement: AR-12 Request User Access to Producer Master Report Attachment (s): October 29, 2013 Original Access Review Audits Requirements November 1, 2013 Original Access Review Audits Requirements QA Review November 12, 2013 Access Review Audits Requirements Update I November 13, 2013 Access Review Audits Requirements Update II R E Q U I R E M E N T S H I S T O R Y O c t o b e r 2 9 , 2 0 1 3 - O r i g i n a l A c c e s s R e v i e w A u d i t s R e q u i r e m e n t s
- 6. Guidewire Billing Center System Department Review 5 | P a g e N o v e m b e r 1 2 , 2 0 1 3 - A c c e s s R e v i e w A u d i t s R e q u i r e m e n t s U p d a t e I N o v e m b e r 1 3 , 2 0 1 3 - A c c e s s R e v i e w A u d i t s R e q u i r e m e n t s U p d a t e I I
- 7. Guidewire Billing Center System Department Review 6 | P a g e F I N A L R E P O R T A c c e s s t o P r o d u c e r M a s t e r R e p o r t - R e p o r t I n f o r m a t i o n ( W o r k s h e e t )
- 8. Guidewire Billing Center System Department Review 7 | P a g e A c c e s s t o P r o d u c e r M a s t e r R e p o r t - L e g e n d ( W o r k s h e e t )