Task: Assess Client Security Policy And Processes

In addition to understanding the security requirements in the contractual document, it is also essential to assess the Client's security policy and processes to obtain better insight into the overall Information Security And Compliance requirements.

Relationships

Roles

Primary Performer:

Engagement Manager (Transition)
Information Security And Compliance Lead

Additional Performers:

Client

Outputs

Client Security Framework Assessment Report

Process Usage

Activities > 09.01 - Assess Obligations For Security And Compliance > Assess Client Security Policy And Processes

Main Description

The Information Security And Compliance Lead is also recommended to study the Client’s environment to understand the:

Client’s existing policies
Security standards Client complies with
Security practices
Audit reports.

This is required to understand the overall picture of security in the Client’s organization and assess Capgemini’s obligations from a security perspective.