2. Guidewire Billing Center System
1 | P a g e
T a b l e o f C o n t e n t s
PURPOSE ...............................................................................................................................................................2
OBJECTIVES............................................................................................................................................................2
NOTE TO DATA OWNER .........................................................................................................................................2
IS SERVICE LEVEL AGREEMENT EXPECTATION ........................................................................................................3
GENERAL INFORMATION .......................................................................................................................................3
REPORT DETAILS....................................................................................................................................................3
JIRA REQUIREMENTS .............................................................................................................................................4
REQUIREMENTS HISTORY..................................................................................................................................................4
October 29, 2013 - Original Access Review Audits Requirements....................................................................................... 4
November 12, 2013 - Access Review Audits Requirements Update I.................................................................................. 5
November 13, 2013 - Access Review Audits Requirements Update II................................................................................. 5
FINAL REPORT................................................................................................................................................................6
Access to Producer Master Report - Report Information (Worksheet) ............................................................................... 6
Access to Producer Master Report - Legend (Worksheet)................................................................................................... 7
3. Guidewire Billing Center System
Department Review
2 | P a g e
P u r p o s e
The purpose of the Department Review Guidewire Billing Center System document is to identify, review, and
maintain processes used in the periodic review of user’s access and their permissions to the system. The document
is divided into 6 sections – Objectives, Note to Data Owner, IS Service Level Agreement Expectation, General
Information, Report Details, and JIRA Requirements. The Objectives section is to identify how this document is used.
The Note to the Data Owner section is specific instruction and guideline to the data owner to help when he receives
the reports and who he should send the report to and how the changes are communicated for logging and tracking
purposes. The IS Service Level Agreement section is to communicate and ensure an IS SLA level 2 Level 2 status for
changes that result from the review process by the data owner as specified in the IS Service Level Agreements itself.
The General Information section is to summarize the system reviewed, the review frequency of that system, the
governing policy and process flows behind the review, the owners involved in the review, and the last system review
date. The Report Detail section is to outline the name and location of the query that generated the report reviewed,
the name and location of the report reviewed by the data owner, the report output format, the report distribution,
as well as the last created report date. The JIRA Requirements section is to identify all report requirements, report
Mock ups, as well as the QA Review Results.
O b j e c t i v e s
To serve as a documentation source to quickly assess what was done in the PILOT of the Access Right
Review Project;
Identify the components of the department review;
To serve as a template (turnkey) as department reviews are conducted on system after system;
Help determine a timeline for implementing the change with consideration given to current and future
projects, and peak business activity schedules;
Contribute to the general improvement of the process.
N o t e t o D a t a O w n e r
This section is set up to help assist the Data Owner through this new process of performing a department review.
We want you to know what is set up, how you fit into the process, and what is expected of you.. Although you are
named as the Data Owner for the system, you are not responsible for performing the entire review.
There is a 3 week turnaround on this process for the department owner. Obviously you aren’t familiar with all the
roles and the people in them, but that you would pass this along to the SME’s in Customer Service, Underwriting,
Finance and Sales & Marketing to gather feedback on their suggested changes. If you need any help with this,
contact the Audit Team of this process, members, Linda Karl, Manager, Compliance and/or Perry Heckemeyer,
Controller.
Once you have received responses from these departments with roles/users changes, these changes will be
communicated through the Help Desk ticket system – so once you have gathered information, let an Audit Team
member know and they will assist you with getting these attached to a HelpDesk ticket so they can make your
proposed changes.
On the spreadsheet there is both a Legend with all the roles and defined permissions for each role as well as the
spreadsheet which has individuals, roles, departments and authority limits. As you can see, there is some default
values that were used for roles granting $10m in authority in some instances. These will likely need to be changed
as well as roles/individuals. Again, if you would like a walkthrough or further contact Linda or Perry.
4. Guidewire Billing Center System
Department Review
3 | P a g e
I S S e r v i c e L e v e l A g r e e m e n t E x p e c t a t i o n
The purpose of this section is to provide the business expectations for role and authorization corrections change
requests. According to the IS Service Level Agreements, “incorrect system access” has an IS SLA Level 2 and resolution
is 2-4 business days. Additionally, “an employee access change or addition” is an IS SLA Level 3 and resolution is 5-7
business days. The business expectations for such change requests is a resolution within 2 – 7 business days, having
an IT Service Level Agreement (SLA) of Level 2, when there are no impact upon other business processes. However,
because of the nature of roles and authorizations changes, data owners, who would request such requests, may
have to analyze the impact on business processes on a case by case basis prior to requesting these changes.
G e n e r a l I n f o r m a t i o n
System Name: Guidewire Billing Center
Review Frequency: Annually
Governing Policy: FS_1047 Corporate Access Management Policy
Process Flows: Access Rights Process Flowcharts
Initiative Owner: Finance
Process Owner: IS Operations
Data Owner: Doug Phillips
Last Review Date: 11/13/2013
R e p o r t D e t a i l s
Query Name:
Access to Producer Master Report Query
Access to Producer Master Report - Legend Query
Query Location: Query Location
Report Name: Access to Producer Master Report
Report Location: Report Location
Output: Excel
Delivery Method: Email
Distribution List: Data Owner and Audit Team (as defined in the Governing Policy above)
Last Created Report: 11/14/2013
5. Guidewire Billing Center System
Department Review
4 | P a g e
J I R A R e q u i r e m e n t s
JIRA Requirement: AR-12 Request User Access to Producer Master Report
Attachment (s):
October 29, 2013 Original Access Review Audits Requirements
November 1, 2013 Original Access Review Audits Requirements QA Review
November 12, 2013 Access Review Audits Requirements Update I
November 13, 2013 Access Review Audits Requirements Update II
R E Q U I R E M E N T S H I S T O R Y
O c t o b e r 2 9 , 2 0 1 3 - O r i g i n a l A c c e s s R e v i e w A u d i t s
R e q u i r e m e n t s
6. Guidewire Billing Center System
Department Review
5 | P a g e
N o v e m b e r 1 2 , 2 0 1 3 - A c c e s s R e v i e w A u d i t s R e q u i r e m e n t s
U p d a t e I
N o v e m b e r 1 3 , 2 0 1 3 - A c c e s s R e v i e w A u d i t s R e q u i r e m e n t s
U p d a t e I I
7. Guidewire Billing Center System
Department Review
6 | P a g e
F I N A L R E P O R T
A c c e s s t o P r o d u c e r M a s t e r R e p o r t - R e p o r t I n f o r m a t i o n
( W o r k s h e e t )
8. Guidewire Billing Center System
Department Review
7 | P a g e
A c c e s s t o P r o d u c e r M a s t e r R e p o r t - L e g e n d ( W o r k s h e e t )