home | genpact.com
 
About Services differentiators careers contact us
Differentiators
Process Excellence
Global Service Delivery
Analytical Capabilities
Technology Expertise
Domain Expertise
People Practices
 
Regulatory Compliance
Regulatory Compliance
   
  Regulatory Compliance
- Deep regulatory knowledge (e.g. in Banking & Insurance regulations)
- Regulatory Compliance focus (SOX, SAS 70, USA Patriot Act, etc)
- A large team focussed on regulatory compliance, including SOX
   
  Physical Access Control
- Access-controlled floor space
- Access control in all buildings has secondary & tertiary level access for restricted entry zones like data centers, hub room etc.
- Production Control, Computer Operations, Data Centers, or any other similarly sensitive areas are located in a physical separated, secure area designated as “Red Zones”
- Physical access to Sensitive Areas is restricted to authorized persons only and controlled by swipe cards plus PIN where necessary.
- Physical access rights to sensitive areas are based on approval matrix and are reviewed and audited regularly.
- Floor space monitored using CCTV (on a 24 hrs basis) to prevent and monitor any suspicious activity on the processing floor.
- Design area for specific clients
- No external data ports
- No removable drives (pen drives/floppy/CD) on the floor
- No camera phones in identified areas
   
  Data Privacy & Information Security
- Regular and consistent monitoring on networks
- Individual Log In ID’s are provided for each system to restricted access.
- mandatory password changes are required to avoid misuse.
- Periodic audits are conducted to check for and remove redundant and un-used user IDs.
- Logical and network access control mechanisms are in place to ensure that only relevant people have access to the Customer/Genpact systems.
- No access to web-mail
- Disablement of all external drives
- External drives and USB ports exist but are not operational
- Information security management BS7799 certified
   
  Integrity@Genpact
- Integrity training for all new associates within 1 month of joining
- Mandatory refresher courses
- Zero-tolerance policy
- Strong Ombudsperson network
- Periodic checks by compliance officers, audits, login tracking, abnormal mail alerts, frequent account reconciliations