SaTCoNet Technical Progress Report for Lake Cement IT outsourcing as on 20 th Sept 2019

SatCoNet Technical Progress Report

1. Project Name Outsourcing of IT services

2. Date Started 1st June 2018
3. Reporting as on 20th September 2019
4. Report includes the tasks completed, in progress, in plan, Risks identified and action plan for Risk Mitigation

Activities completed
No Activity Responsible Comments

1 Removal of multi-login access and to SatCoNet Successfully completed

ensure that user can have single login at
a time from the dedicated device
2 Configuration of Secure Remote VPNs SatCoNet Successfully completed.
using self-signed certificate and all the
users who required
3 Installed and Configured Policy for the SatCoNet Successfully completed.
Guest to connect in Kimbiji Lan and Get Guest cannot connect to any company
the internet resource other than the internet

4 Removal of Virus detected at QC (Quality SatCoNet Successfully completed.

control) dept. reporting having a virus Root cause is virus on old USBs kept by LCL
(IMG001 Image) staff in spite of many reminder.
Those USBs should not be used without
cleaning by our engineer

Page 1 of 6
 SaTCoNet Technical Progress Report for Lake Cement IT outsourcing as on 20 th Sept 2019
Activities in progress
No Activity
1 Installation of Sophos Intercept X
to all PC connected to lake
cement network
2 Removal of MAP drive/File from
Client PCs communication in LAN
at Kimbiji
3 HQ Wi-Fi signal on the left wing
signal strength is very weak
Responsible
SatCoNet/Lake Cement user team
SatCoNet/Lake Cement user team
SatCoNet
Status/Comments
Objective of this activity is to remove the
operational headache of Externa device/Mapping
File /USBs.
Proposed removal of MAP drive/Folders services
and connecting to directly from the PC
Require a site visit to troubleshooting all the 3 Wi-
Fi devices
Page 2 of 6
 SaTCoNet Technical Progress Report for Lake Cement IT outsourcing as on 20 th Sept 2019

Statistics of PCs
S Protected Users at Comments
Users Qty
N risk 
90 61 29 (total PCs are 92 including , 22 (Head office) , 63 Kimbiji
1 PCs
2 ERP 61 45 16 Now total no of ERP PCs which are not protected completely are 16,
PCs. PCs are getting infected due to sharing/mapping the drives.
We have to stop drive sharing and USBs
PCs are not getting windows updates( refer the concerns already communicated)
Completed Successful

3 3 0 3 of these PCs are isolated and protected

Weigh bridge
3 Completed Successful
(Non-ERP)
2 1 0 One is protected , One is isolated ( no internet and hence not protected)
Payroll
4 Completed Successful
(Non-ERP)
Only internet 24 13 11 Not very important, Normal protection is required.
5
users
CCTV 1 0 1 Only 1 PC , This PC does not access internet and hence protection is not required
6 users(Non- Completed Successful
ERP)
Note all other Servers have been segregated except CCTV servers which is in the
plan.

Page 3 of 6
 SaTCoNet Technical Progress Report for Lake Cement IT outsourcing as on 20 th Sept 2019

Activities in Plan
ID Activity Responsibility Comments/Status
1 Securely allow software Updates to SatCoNet Completed Successful
ERP Applications/Softwares
2 Windows/Sophos patches / updates SatCoNet Completed Successful
on the servers and firewalls for both
the
3 Procurement of the new server with Lake Cement
Necessary Licenses
4 Preventive Maintenance of LAN and SatCoNet
PCs

Page 4 of 6
 SaTCoNet Technical Progress Report for Lake Cement IT outsourcing as on 20 th Sept 2019
Identified Risks
Risk Risk Reason for Rating
Rating
1Pc at Quality control High Root cause is virus
dept. reporting having a on old USBs kept by
virus (IMG001 Image) LCL staff in spite of
many reminder.
CCTV Backup Server High In the event of non-
availability of data
from the external
storage due to any
disaster, business
continuity will suffer
Required Action to Mitigate Risk Responsibility Due Date for
Assigned to completion
Mitigate external risk-already done(Any SatCoNet It depends upon
access from WAN is blocked and all risky how fast this
traffic from internet is scanned and protected) activity is
Mitigate internal Risk- Selected PCs completed
connecting to Externals device eg USBs
must be protected using Sophos Intercept X
protection. User’s reluctance/delay in
handing over the USBs for formatting.
SatCoNet assign resources for this activity
provided the USBs are made available
To complete this connectivity, it requires Lake cement Requires
installing server part of the backup utility on /SatCoNet decision from
the current CCTV Server. Lake Cement
As it is the only single server operational at
this moment, it is advised to install this utility
starting with newly purchased server.
Remote back storage will be configured
starting with new server.
In the current scenario, Lake Cement must
ensure that the backup is procurement of
new server.
Page 5 of 6
 SaTCoNet Technical Progress Report for Lake Cement IT outsourcing as on 20 th Sept 2019

Identified Risks
Risk Risk Reason for Rating
Rating
Risk of connecting High Anyone can connect
through Wi-Fi/LAN a PC through Wi-
network Fi/LAN device which
is not protected from
the Viruses/Malware
and use this PC to
connect servers using
Existing user
credential
Required Action to Mitigate Risk Responsibility Due Date for
Assigned to completion
Devise and Implement the Policy that any PC Lakecement/
which is infected, will not be allowed to SatCoNet
connect to any server and hence it will be
automatically disconnected from the servers. Decision
required from
Lake Cement
Presently this policy is not applied due to the
fact that many PCs will be denied the access
to server resources.

Our Recommendation is to disconnect these

PCs , Format , install and then deploy in the
network

Engineer on Duty: Sharif Kifika/Simon Mawi

Date Site name
 16/9/2019  Lake cement kimbiji
17/9/2019  HQ
18/9/2019 Lake cement kimbiji
19/9/2019 HQ
20/9/2019 HQ
21/9/2019  Lake cement kimbiji
   

Page 6 of 6