Anindya Sundar Bera

• Projects - Multiple Clients under Canada and US territory
• Tool - Aura, Phoenix, Connect, Alteryx, UiPath
• Responsibilities -

As part of the ITGC and ITAC audit team, and assist territory engagement teams with testing of IT General Controls and IT Applications Controls

Handling small clients with ITGC & ITAC testing support

ITGC testing activities primarily relate to the following cycles/domains:

• Change Management (i.e., application code revisions, system upgrades, infrastructure changes, security patches/updates)
• Logical Access (i.e., user administration, access recertification)
• Computer operations (i.e., problem management, batch processing, back-ups)
• Program Development
• Attend walkthrough clients and documenting process narratives
• Have understanding of internal controls and compliance

ITAC testing activities primarily relate to the following checks:

• Completeness - ensure all records were processed from initiation to completion
• Validity - ensure only valid data is input or processed
• Identification - ensure all users are uniquely and irrefutably identified
• Authentication - provide authentication mechanism in application system
• Authorization - ensure only approved business users have access to application system
• Input Controls - ensure data integrity fed from upstream sources into application system
• Forensic Controls - ensure data is scientifically correct and mathematically correct based on inputs and outputs

Responsibilities:

System Analysis; System, UI/UX, and Database Designs; ERP and DBMS analysis

These activities primarily relate to the following projects:

• Project 1: Designing Digitized Order Management Module, designing Outbound Logistics System Design, and designing Decision Support System for Procurement
• Project 2: Designing various modules of HRMS.

Projects - GLAXOSMITHKLINE (GSK), JD Edwards World Soft

Database: DB2

Programming Language: CLP and RPG

Responsibilities -

• Logical access – Analyzing as per policies and standards; and providing solutions based on business need
• Incident management - Address operational processing errors as per policies and standards
• Problem management - Identify and address root cause of incidents as per policies and standards
• Monitoring production servers, monitoring scheduled jobs for month-end and year-end closure
• Implementation of Source Code into Live Server
• Generating Reports through Open Database Connectivity (ODBC) for audit and analysis.