STPL’s Consulting Services deliver integrated, end-to-end IT enabled solutions and services to help Business transform with certainty and devise the most effective strategy and implement the best solutions.
How STPL help the clients ?
STPL with its in-depth business insight and knowledge and technology expertise in CBS platform, Net banking, payment Systems, IT Infrastructure, Various HRMS & Back office workflow software, Firewalls, Servers & Storage devices , ATMs & its supporting infrastructure is better positioned to offer its services to the Banks in their need for various consultancy services in the areas of Business & Management and IT Audit and Assurances areas.
STPL’s Framework for IT Consultancy is based on COBIT-5, . ITIL V3 / ITSEC/CC , ISO 27001:2005 / BS 7799 , Sri G.Gopalakrishna Report on Information Security, Electronic Banking, Technology Risk Management, and Cyber Frauds, Industry best practices in Capacity management, information security & IT operations, RBI guidelines and IDRBT expert opinions.
Systems and Applications: An audit to verify that systems and applications are appropriate, are efficient, and are adequately controlled to ensure valid, reliable, timely, and secure input, processing, and output at all levels of a system's activity.
Systems Development and Migration: An audit to verify that the systems under development meet the objectives of the organisation, and to ensure that the systems are developed in accordance with generally accepted standards for systems development. The Migration audit ensures that the objectives of the organisation has been met as per the Requirements of the System and verify that the standards have been complied with.
Management of IT and Enterprise Architecture: An audit to verify that IT management has developed an organizational structure and procedures to ensure a controlled and efficient environment for information processing. This audit reviews the technologies that the business currently has and that it needs to add. Technologies are characterized as being either "base", "key", "pacing" or "emerging".
Client/Server, Telecommunications, Intranets, and Extranets: An audit to verify that telecommunications controls are in place on the client (computer receiving services), server, and on the network connecting the clients and servers.
EDP Audit: An Audit of all information system assets, to ensure that they are adequately safeguarded against risks and vulnerabilities of natural and man made disasters by reviewing "general control” and "application control ".
The preliminary details to understand the client’s requirement would be collected based on interviewing the client’s personnel and a visit to the Client/ Data centre. The consultant would further discuss with various heads of departments and stake holders, in the matter.
The Consultant would generally interact with various officials of the client - CEO, IT Head/Managers, Business Heads, IT infrastructure and the Team.