ACL PROOF OF CONCEPT ANALYSIS FOR UGANDA TELECOM

BY

AH

CONSULTING
MAY 2007

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

Objective:
The purpose of the Proof of Concept (PoC) was to prove that ACL can: 1. Interface with the disparate systems and extract data from the selected tables 2. Import and format the data as desired for the companys product lines 3. Compare information for the disparate systems 4. Generate reports of the results of the analyses

Scope:
The following analyses were performed: IN Platform: Manual Recharge: 1. A comparison between the staff listing from Human Resources and the telephone numbers of staff in the manual recharge listing from the IN platform. This is to identify non-staff whose accounts have been recharged. 2. Identify charges to staff numbers exceeding the authorised allocation by user account eppcadm on days 30 April 2007 and 4 May 2007. Card recharge: 3. Compare PINs loaded and activated onto the switch with those generated from Finance department to identify if there are any PINs generated and activated onto the switch outside the Finance department for the 50,000 and 100,000 denomination cards. Subscriber status: 4. Compare profiles of staff per the IN with those per the staff listing from Human Resources department. This is to identify subscribers with the staff profile on the IN yet they are not authorised staff members. 5. Age active subscribers per the IN Data: BWDATA 6. A comparison between the Bandwidth Manager data (BWDATA) of Client, Speed and Status against the TABs system (CRM_USER_INFO table)

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

Fixed line: NGN Switch 7. A comparison between the Postpaid and Prepaid subscriber account status per the NGN switch and the TABs system (CRM_USER_INFO table) EWSD Switch 8. A comparison between the Postpaid and Prepaid subscriber account status per the EWSD switch and the TABs system (CRM_USER_INFO table) OCB Switches 9. A comparison between the Postpaid and Prepaid subscriber account status per the OCB switches and the TABs system (CRM_USER_INFO table) Sun Accounting: Accounts reference file 10. Interface with the SQL database and import records into ACL Ledger file 11. Interface with the SQL database and import records into ACL Sun reference file 12. Interface with the SQL database and import records into ACL

Data sources used:

The table below shows the sources of data for analyses performed
Data IN (manual recharges) Staff listing IN (PINS) PINS generated IN (PPS status) BWDATA Customer user information Fixed Line subscribers Fixed Line subscribers Fixed Line subscribers Sun Accounting Source IN Server HR Department IN Server Finance Department IN Server Bandwidth Manager TABS System NGN Switch EWSD Switch OCB Switch Sun Systems Format Flat files Excel spreadsheet Flat files Flat files Data Dumps ORACLE Server Data Dumps Data Dumps Data Dumps SQL Server

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

Proof of Concept analysis results:

The tables below show results of the analyses carried out. Where duplicate and erroneous records were noted, they were ejected from the analysis and stored in separate tables for follow up. Within the results we identify areas of required follow up and evidence that ACL can read off the selected Application Systems and Databases. Note that the occurrence of duplicate records is in itself a concern. IN Platform (Manual Recharge): A total of 28,651 manual recharge records were imported from the IN dump with statistics as shown in the table below within the period of 1 Jan 07 to 9 May 07. 16,170 of the recharges were negative values which were removed from the analysis.
Amount Range Positive Negative Zeros Totals Abs Value Number 12,481 16,170 28,651 Total 5,670,000 537,637,716 -6,729,553 530,908,163 544,367,269 Average 43,076 -416 18,530 -

A summary of this data revealed that a total of 4,588 subscriber accounts received a manual recharge at least once during this period. 1,059 records were imported from the Excel worksheet of staff data. A clean up of all non 071 references left 938 records. Of these 7 duplicate PF_No records were detected as shown in the table below and also removed leaving 931 records.

PF_No 50195 50195

Allocation 30,000 30,000

Business_Unit Commercial Commercial Managing Director HR & Administration

First_Name WILFRED OLIRUS

Last_Name AKIKI AKIKI WILFRED

Mobile_Number 23 spaces 071-2168446

Rank Point of Sales Agent Relief Point of Sales Agent Executive Assistant Executive Assistant Transmission Network

50378 50378

0 0

MWITI STELLA

STELLA MWITI

071-2488398 071-2488398

50397

150,000

Technical

DERRICK

SEBAALE

071-2616820

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

PF_No

Allocation

Business_Unit

First_Name

Last_Name

Mobile_Number

Rank Transmission and BSS planning Engineer Accounts Relationship Manager Events Manager

50397

100,000

Technical

SEBAALE

DERRICK

071-2520230

50476 50476

80,000 200,000

Commercial Commercial

RONALD EDWARD

MWESIGWA MUGULUSI Ngabirano Micheal Baryehuzya Frank

071-2684531 071-2220243

50636 50636

10,000 10,000

28 spaces 28 spaces

44 spaces 44 spaces

071-2382 106 071-2029940

OH Regions Rukungiri Call Centre Agent Call Centre Agent Call Centre Agent Call Centre Agent

50667 50667

20,000 20,000

Commercial Commercial

BERNARD BERNARD

ASABA ASABA

071-2972710 071-2972710

50668 50668

20,000 20,000

Commercial Commercial

NATASHA NATASA

NAKIYEMBE NAKIYEMBE

071-2596945 071-2596945

The 4,588 records from IN were joined to the 931 staff data revealing that 3,721 subscriber accounts received credit by manual recharge yet they were not on the staff data listing. Of these, 446 subscriber accounts were credited by the eppcadm account who is authorised to perform the recharges. Staff with recharge amounts in excess of allocation: Our analysis also revealed that of the staff receiving manual recharges, some were in excess of the authorised allocation per the staff data listing as shown in the table below.
Name AKILA Murali Jackie Atwine Rogers BEN MWINE Murangira Kenneth NYAKUNDI Damba Esther Mobile No. 712006611 712200625 712215733 712253126 712295544 712334447 712380252 PF_No 0 0 0 10000 0 50556 0 Amount 40000 20000 20000 40000 10000 250000 10000 Allocation 20000 0 0 20000 0 0 0

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

Name Kusiime Jackline Haumba Cathy Mwesigwa Brian KIRINDA Kanyesigye Dickson Atuhaire .A. Hellen Namulema Sarah Kato Gershom Damulira William Kaitesi Gloria Kairumba Winnie Musinguzi Johnson LINDA KIBOMBO Aijuka Douglas Kyobe Luke Wairimu Lillian Atuhairwe Maserina Sebahiire Vianney Kahangire Nicholas KHAUKA

Mobile No. 712384802 712392007 712400060 712462072 712522168 712539103 712627211 712640429 712665296 712700144 712811161 712812460 712868738 712922255 712924640 712935381 712939093 712975372 712980905 714212121

PF_No 0 0 0 50434 0 0 0 0 0 0 0 0 10000 0 0 0 0 0 0 0

Amount 10000 10000 88000 275000 30000 103025 20000 88000 88000 165000 20000 103025 40000 40000 8000 103125 10000 40000 40000 40000

Allocation 0 0 0 200000 0 0 0 0 0 0 0 0 20000 0 0 0 0 0 0 20000

Dealers and the amounts recharged We extracted from the IN profile all subscribers with the profile 5 which is used by dealers which was cross-linked to the recharge accounts to very the amounts credited to dealer accounts. The table below shows the dealer numbers.
Subscriber Number 712201020 712571229 714900073 714900063 714900064 714900077 714900079 714900080 714900000 Status ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE Validity date 07/28/2007 06/10/2007 01/08/2008 03/23/2008 07/07/2007 07/05/2007 05/08/2008 05/07/2008 01/24/2008

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

We then determined the amount allocated per dealer as shown in the table below.
Dealer number 712201020 712571229 714900073 714900063 714900064 714900077 714900079 714900080 714900000 714900000 Amount recharged nil nil nil nil nil nil nil 926 5,000,000 5,000,000 Date ID

03/21/2007 01/24/2007 01/25/2007

sydney eppcadm eppcadm

There is evidently one dealer of concern who received 10 million worth of credit over a two day period. Aging of subscribers: The table below shows the results of aging of subscriber validity dates usingthe ACL aging command with a cutoff date of 31 May 2008 being the maximum attainable.
Days 0 - 29 30 - 59 60 - 89 90 - 119 120 - 10,000 Totals Count 155,828 72,509 28,407 21,599 158,796 437,139 Percent of Count 35.65% 16.59% 6.50% 4.94% 36.33% 100%

The results show that approximately 36% of subscribers are valid maturing in the month of May 2008 while another approximately 36% are have validity dates expiring within the next 29 days of May and June 2007. The graph overleaf, also generated within ACL, shows diagrammatic representation of the above table.

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

Subscriber accounts with staff profile yet not staff members: The table below shows the status of subscribers on the IN platform. 77% of subscribers or 437,139 were found to be active.
Status ACTIVE BLOCKED DEACTIVE GRACE INACTIVE UNUSED Totals Count 437,139 21 47,295 9,753 43,555 30,950 568,713 Percent 77% 0% 8% 2% 8% 5%

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

We profiled the 437,139 active subscribers with results shown as in the table below. Of interest were the 1,445 subscribers included under the staff profile and therefore deriving staff benefits and privileges.
Profile 0 1 2 3 4 5 6 7 8 9 10 11 12 14 15 16 Totals Count 1 72,058 292,460 9 78 9 42,426 4 715 1,445 6,025 202 226 12 2 21,467 437,139

Our analysis of the 1,445 subscribers against the staff listing from the Human Resources department revealed the following summarised in the table below.
Switch Switch Staff listing Total 644 801 1445 Staff listing 801 131 932 Total 1445 932

This shows that 644 numbers were found to have the staff profile 9 while not appearing on the staff data listing. Also 131 staff per the staff data listing did not have a staff profile on the switch. Note also that one of the subscribers was of profile 0 which is strange since there are no known tariff plans for the said profile (Source: Internal Audit). The subscriber details are shown in the table below.
Subscriber Number 712398211 Status ACTIVE Validity date 01/28/2008

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

Test call numbers: We also identified test numbers which have the profile numbers 3 and 7 totalling 13 numbers as shown in the table below. It is important to monitor the use of the test call numbers to avoid misuse and abuse or even fraudulent transactions.
Subscriber number 712910976 712911086 712911087 712910991 712910985 712910986 712910987 712666308 712298027 712627036 712128997 712260498 712298028 Status ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE Validity date 09/14/2007 09/14/2007 09/14/2007 09/14/2007 09/14/2007 09/14/2007 09/14/2007 06/25/2007 09/14/2007 08/31/2007 08/26/2007 06/12/2007 10/14/2007 Profile 3 3 3 3 3 3 3 7 3 7 7 7 3

PINs generation and activation analysis: The table below shows the sample PINs generated by the Finance department to be used in the analysis and the serial number ranges.
Dealer X-Tel X-Tel TelChoice TelChoice TelChoice Ellams Ellams Ellams Ellams Ellams Date 14-Dec-06 14-Dec-06 02-Jan-07 02-Jan-07 02-Jan-07 22-Jan-07 22-Jan-07 22-Jan-07 22-Jan-07 22-Jan-07 Value 2,000 4,000 100,000 20,000 50,000 10,000 10,000 10,000 10,000 20,000 Batch_no 0200006 0300001 0900001 0700001 0800001 0600001 0600002 0600003 0600004 0700002 Quantity 100,000 100,000 100,000 100,000 100,000 100,000 100,000 100,000 100,000 100,000 1st Serial no. 020000600000000 030000100000000 090000100000000 070000100000000 080000100000000 060000100000000 060000200000000 060000300000000 060000400000000 070000200000000 Last Serial no. 020000600099999 030000100099999 090000100099999 070000100099999 080000100099999 060000100099999 060000200099999 060000300099999 060000400099999 070000200099999

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS Dealer SC Ellams Nile Bank Date 22-Jan-07 22-Jan-07 5-Feb-07 Value 4,000 50,000 10,000 Batch_no 0300002 0800002 0600005 Quantity 1,000,000 100,000 100,000 1st Serial no. 030000200000000 080000200000000 060000500000000 Last Serial no. 030000200999999 080000200099999 060000500099999

The table below shows the summary of results from the analysis of the 50,000 and 100,000 denomination cards against listing of activated cards at the Switch.
50,000 denomination card Total number of cards activated at Switch Cards within the 080000100000000 - 080000100099999 range Cards within the 080000200000000 - 080000200099999 range Cards not matched to Finance department Quantity 432 0 -315 117

100,000 denomination card Total number of cards activated at Switch Cards within the 090000100000000 - 090000100099999 Cards not matched to Finance department

Quantity 766 766

The tests above show that clearly for the 50,000 denomination there are some PINs activated at the switch that were not generated from the Finance Department. Note however that for the 100,000 denomination there was insufficient information to conclude. OCB, EWSD, BWDATA Subject to available time prior to the EXCO meeting Tuesday 15 May 2007, to which this report was to be presented, we were unable to complete the analyses using the OCB, EWSD and BWDATA. It was therefore agreed that we include screen shots of the reports in their natural text dump format and of the ACL imported format. These are shown as overleaf. The screenshots server to prove that ACL was able to read data off the variated text dump formats and create meaningful data for use in analyses.

10

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

Screen shots: OCB Text dump

ACL Import of OCB Data

11

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

BWDATA Text dump

ACL Import of BWDATA Data

12

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

EWSD Text dump

ACL Import of BWDATA Data

13

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

Sun Accounting: An SQL link was established with the Sun Accounting system of which the following tables were extracted for proof purposes. Note that being database links, the tables can be continually updated when changes are made to he originating database by commanding a refresh function on a time specified interval. Accounts reference file:

14

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

Sun reference file:

Ledger file:

15

UGANDA TELECOM LIMITED

PROOF OF CONCEPT ANALYSIS

Synopsis:
The above few analyses, which do not even extend to an analysis of CDRs, show that there are exceptions on the onset that management should address. Using ACL as a tool will allow management the independent assurance of the existing processes and systems in place. Given the tools flexibility even future planned systems will be able to interface with ACL seamlessly. All of the analyses can be automated, which also frees time for creating reports, to the all more important aspect of analysing them and making timely, informed decisions.
NB: The results from the tests should not be taken to be complete and final without the additional analyses that would be required in an ordinary ACL system analysis.

16