Error!

Unknown

Access Control document property

name.008
Process Version: 1.1

Access Control Document

Velocis System Pvt Ltd.

Document Version: 1.1

Document Date: [08-July-2023]

Document Summary:

Policy Category Common

Policy ID

Version Number Version 1.0

Effective Date 08-July-2023

Owner Manas Ranjan Sahoo

Approved By Sagar Sharma

Document Status Final Release

Confidential © Velocis Systems Pvt. Ltd 2009 Page 1 of 5

 Error! Unknown

Access Control document property

name.008
Process Version: 1.1

Document Label Internal

Revision History

Version Date Prepared/ Reviewed by Approved by Reason for Change

Revised by

1.0 08-07-2023 Vivek Rajnish Manrai Rajnish Manrai Initial Draft

Sankhyan

1.1 20-12-2023 Vivek Rajnish Manrai Rajnish Manrai Reviewed only

SANKHYAN

Access Control Document for NOC

1. Overview This document outlines access control guidelines and procedures for
managing access to the following technology and devices within the Network
Operations Center (NOC):

• Routers
• Firewalls
• Switches
• Servers
• ACI

Confidential © Velocis Systems Pvt. Ltd 2009 Page 2 of 5

 Error! Unknown

Access Control document property

name.008
Process Version: 1.1

• DNAC
• CUCM
• HX
• Umbrella
• DUO
• AMP
• IT Service Management (ITSM) & Network Management System (NMS)
tools
2. Access Control Policies for Specific Devices

Routers, Firewalls, and Switches:

• Access to router, firewall, and switch configurations and management

interfaces will be restricted to authorized network engineers and
administrators.
• Access will be granted based on role-based access control (RBAC)
principles, ensuring that only personnel with specific job roles requiring
access will be provided permissions.
• Remote access to these devices will be secured using encrypted protocols
(such as SSH, HTTPS) and multifactor authentication where feasible.
Servers:

• Access to servers within the NOC will be controlled based on the principle
of least privilege.
• Server access will be limited to system administrators, network engineers,
and relevant support personnel.

Confidential © Velocis Systems Pvt. Ltd 2009 Page 3 of 5

 Error! Unknown

Access Control document property

name.008
Process Version: 1.1

• Physical access to server rooms will be restricted to authorized personnel

only, monitored by access control systems.
ITSM & NMS Tools:

• Access to ITSM and NMS tools will be granted to authorized NOC personnel
responsible for network monitoring and management.
• Access permissions will be assigned based on job roles and responsibilities.
• Usage and access to these tools will be logged and monitored regularly to
detect any unauthorized activities.
3. Access Control Procedures

a. Access Provisioning i. Requests for access to these devices and tools must be
submitted through a formal access request process. ii. Access requests will
require appropriate approvals from supervisors or department heads.

b. Access Review and Monitoring i. Regular reviews of access permissions will be

conducted to ensure alignment with job roles and responsibilities. ii. Logs and
audit trails of access activities will be monitored for any anomalies or
unauthorized access attempts.

c. Password Management i. Strong password policies will be enforced for device

and tool access, including regular password changes, complexity requirements,
and avoiding password sharing.

d. Physical Access Controls i. Physical access to server rooms and critical

infrastructure housing these devices will be restricted through biometric access,
keycards, or other secure measures. ii. Visitor access to these areas will be
escorted and supervised at all times.

4. Responsibilities

Confidential © Velocis Systems Pvt. Ltd 2009 Page 4 of 5

 Error! Unknown

Access Control document property

name.008
Process Version: 1.1

a. IT Department: Responsible for implementing and enforcing access control

measures, conducting regular audits, and managing access permissions.

b. Managers and Supervisors: Responsible for authorizing access requests based

on job roles and overseeing access reviews for their respective teams.

c. Employees and Users: Responsible for adhering to access control policies,

safeguarding access credentials, and promptly reporting any security incidents or
breaches.

5. Enforcement and Compliance Violations of this Access Control Document may

result in disciplinary actions in line with the organization's policies. This document
complies with industry standards (e.g., ISO 27001) and relevant regulatory
requirements.

6. Document Control This document will be reviewed and updated as necessary

by the IT Security team. All revisions will be appropriately documented and
communicated to relevant stakeholders.

Confidential © Velocis Systems Pvt. Ltd 2009 Page 5 of 5