The Situation

This FTSE 100 multinational had been implementing the GDPR policies to protect their customers and employees data as well as specific and sensitive systems such as Payroll. Having implemented the GDPR directives to nearly all European markets, I was approached to assist them as a Business Analyst with the French market as the French Payroll supplier didn’t speak any English.

The Task

I was tasked to support the IT GDPR Project Lead in documenting the France as-is processes across Payroll, Finance and Production teams and implement the to-be as soon as feasible.

The Action / Approach

I designed a project charter, high-level plan and schedule translated in English and French to gain stakeholders support and ensure clarity on what was needed to be achieved. I provided weekly status updates.

I organised conference calls with France Payroll and Production teams to document the as-is. I liaised with the French software Payroll supplier to understand its architecture, data flow and storage requirements into a server as well as Two Factor Authentication requirements.

I analysed the as-is to identify the sensitive data and its flow across processes.

I defined the Identity & Access Management business and non-functional requirements to optimise/design the IT security & data management processes.

I managed the UAT Testing by creating test approach, schedule, scenarios/use cases and acceptance criteria. I supported the users onsite the Paris site with testing and managed defects with technical teams.

I assisted the technical teams and IT Helpdesk and French vendor with cutover plan and activities.

I designed an FAQ related Provisioning and Maintenance processes to prepare the teams with upcoming changes with Go Live communications and support.

 

 

The Result

Successful implementation of Two Factor Authentication to protect France Payroll sensitive data.