NETconsent Solution Overview

1
NETconsent Solution Overview

• Dominic Saunders
• Operations Director

2
Agenda

• The Business Problem
• NETconsent Overview
• The Products
• Sample Client List
• Live Demonstration

3
The Business Problem

• Technical vs Documented Policies
• Policies are Legal Documents
• Addendum to Contract of Employment
• Some users have not read the latest version!
• I never received it!
• Always too busy
• Never in the Office
• Rollout not managed correctly
• Time Pressure for HR Policy Dept
• Contractors/Temps
• New Starters
• People do not know their Rights, Roles
  Responsibilities

4
The Business Problem (contd)

• Keeping the Audit trail
• Ever Evolving Legislation!
• Employment Act 2002, HR Act DP Act, RIPA,
  SOX, Basel II, FOI etc
• Protecting the Organisation
• The Business Employees
• The Management Overhead
• Effective Policies
• The Costs
• Print, Distribution, Chase, Record
• Every time a policy is changed

5
Deploying a Policy

• Logistical Nightmare!
• Paper chase
• People chase
• Audit trail
• Example Corporate
• 500 users (150 remote workers)
• Cost to HR 17 Man Days to deploy
• _at_300 5100
• 10 per head per policy per change
• And still not foolproof!

6
In Practice?

• It just does not get done!
• And this leaves the organisation at risk!

7
Supporting the Business

• Corporate Governance
• Turnbull Report - Recognise the Risks
• Cadbury Report - Do something about them
• Greenbury Report - Report Back on Actions
• Higgs Report - Now prove it
• Other Relevant Directives
• Basel II
• Financial Liquidity Compliance
• Sarbannes Oxley
• US trading standards

8
What the Government have to say..

• In the recently issued UK Government
  supplementary guidance to Part 3 of the
  Employment Practices Data Protection Code, it
  states"The capabilities of electronic systems
  should be used to remind workers of their
  responsibilities. These can be set so that
  workers cannot proceed to access the internet or
  e-mail services without acknowledging the
  acceptance of certain conditions."
• The Information Commissioner states in RIPA
  (Regulatory Investigatory Powers Act) that
• The organisation must be able to demonstrate
  beyond all reasonable doubt that the individual
  has had the opportunity to read the policy

9
Product Suite

(and LANconsent Pro)
10
NETconsent Overview

• Product Suite
• NETconsent Policy Server
• Policy Enforcement Points
• Internet
• Mail
• IT Policies
• All other Policies
• Totally Web-based
• No client deployment

11
The Components

• NETconsent Policy Server
• Central Repository for ALL policies
• Version Control
• Audit Trail Reporting
• User Management
• Technical Requirements
• Normally does not need dedicated server (subject
  to size of end user)

12
The Components (contd)

• Policy Enforcement Points
• There are 2 PEP types
• Mandatory
• Restricts access to a service until the policy
  has been accepted
• WEBconsent
• MAILconsent
• LANconsent
• Non-Mandatory
• LANconsent Pro
• Designed for those policies where we cannot
  prevent contravention of the policy using IT but
  we want to use the same method and audit trail
• Uses LANconsent PEP technology and can have
  by-pass facilites No. of Skips or No of Days

13
Integrations

• NETconsent
• MS Windows 2000/2003 Server running IIS
• Microsoft MSDE/SQL Server
• WEBconsent
• Microsoft ISA Server
• Blue Coat
• Netcache
• SQUID Proxy

14
Integrations (contd)

• MAILconsent
• Lotus Domino (Requires technical discussion)
• Microsoft Exchange 2000 2003
• MS Exchange 5.5 NOT supported
• LANconsent LANconsent Pro
• Microsoft NT4 Domains
• Microsoft Active Directory (2000 2003)
• LDAP

May require technical evaluation
15
Features Benefits

• Ensure Immediate Compliance
• All access is denied until agreement of the
  individual
• Simple Deployment
• Integrates seamlessly with existing network
• At the touch of a button!
• Managed by Non-IT Staff
• Policy Generation Review on-line
• Access control using existing Network Logon
• Simple Revoke function
• Limit Legal Liability
• Guarantee users are aware of Corporate Policy
• Ensure all new users agree to the latest version
• Once a policy is Activated it CANNOT be
  modified
• It is a contract
• Increase review frequency as required
• Change with technology/current issues
• Ensure user authentication by digitally signing
  their Accept/Decline action
• Multi-Lingual Policies
• Multiple Policy Support by Groups

16
Intranet Integration

• Integrate with systems Intranets
• Display Currently Active Policy(s)
• Display by Individual User Activity
• Review activity policies unique to that user

17
Auditing and Reporting

• Full Audit Trail
• By Policy
• Who has Agreed
• When?
• How long was the Policy on the screen for?
• Who has Declined
• Access to the Service is prohibited (optional)
• eMail sent to the Policy Administrator
• By User
• Which policies have been Agreed to
• Historical activity within the system
• By Date
• Reporting for Tribunal purposes
• Encrypted policies and database for security
• Authenticated actions

18
NETconsent Informer

• Management of Broadcast Information
• Display Information
• Only to Relevant Users
• Only During the Valid Period
• Uses existing PEP technology
• LANconsent WEBconsent

19
Features Benefits

• Enhances worker productivity
• Improves organisational efficiency
• Users only receive relevant information so are
  more likely to read broadcasts
• Reduces unnecessary internal email traffic
• Lowers data storage and management requirements
• Notices are not stored in eMail systems and
  therefore being backed up
• Improves staff morale
• Awareness

20
Clients

• Local Authorities
• Wigan Council
• Doncaster Council
• Sunderland Council
• Cornwall County Council
• Corporate
• Chubb Security Personnel
• Wella GB
• Christian Salvesen Logistics
• C. Hoare Co Bank
• Wellcome Trust
• RHM
• Manor Bakeries
• Optimax

21
Bespoke Development

• NETconsent
• Not just a package
• Integrations
• HR Systems
• Finance Systems
• Manufacturing Systems
• Door-Entry Systems
• Intranet/Internet/Extranet Sites
• Enrolment Systems

22
Futures

• New Graphical User Interface
• Non-PC Users
• Questionnaires
• Search Facilities
• Public Access