FUJ00172221
FUJ00172221
Peak Incident Management System
Call Reference PC0205806 Call Logger Deleted User -- Security Ops
Release Targeted At -- HNG-X 03.24 Top Ref _ AUDIT EXTRACT CLT_0324 D066-D065
Call Type Vulnerability Priority B -- Important
Contact Deleted Contact Call Status Closed -- S/W Fix Available to Call Logger
Target Date 30/10/2010 Effort (Man Days) 0
Summary Duplicate records not recorded on POL spreadsheet returns
All References Type Value
DeviIntRel-Director Live Supp.Test
Product Baseline AUDIT EXTRACT CLT_ 0324 D066-D065
Release PEAK PC0207465
Product Baseline AUDIT EXTRACT CLT_0324 V066
Product Baseline AUDIT_EXTRACT_CLT_0324 V066-V065
Impact
Sete cee Bek
Unknown 24-Nov-2010 16:54:02
The Audit Client does not report overlaps or duplicates in the messsage sequences. There have been
reported incidents of JSN numbers being used for 2 different transactions and we need to capture such
instances. Also we need to be sure that any duplicate transactions as a result of harvesting errors have been
highlighted.
This is very important because we need to ensure we provide POL with the correct transaction records as
they may be used by defence and the court for litigation activity.
Progress Narrative
bate:27-Oct-2010 11:50:05 User:Penny Thomas
CALL PC0205806 opened
betails entered are:-
lsummary:Duplicate records not recorded on POL spreadsheet returns
call Type:v
call Priority:B
ffarget Release: HNG-X R2
Routed to:Security Ops - Penny Thomas
jbate:27-Oct-2010 11:56:31 User:Penny Thomas
there is an inconsistency on the audit reporting on the final spreadsheet return to POL
jrecords (based on the NUM or JSN) but we do not report overlaps or duplicates in the
that we record gaps in transaction
5. There have been reported
I Algo we need to be sure
dents of JSN numbers being used for 2 different trans.
ions and we need to captu
that any duplicate transactions as a result of harvesting errors have been highlighted.
[this is very important because we need to ensure we provide POL with the correct transaction records as they may be used by
ldefence and the court for litigation activity.
[Date:27-Oct-2010 11:56:54 Uscr:Penny Thomas
[fhe Call record has been transferred to the team: Audit-Dev
the Call record has been assigned to the Team Member: Andrew Mansfield
JDate:24-Nov-2010 16:54:02 User:Andrew Mansfield
new Business Impact has been added:
Ithe Audit Client does not report overlaps or duplicates in the messsage sequences. There have been reported incidents of JSN
jnumbers being used for 2 different transactions and we need to capture such instances. Also we need to be sure that any duplicate
transactions as a result of harvesting errors have been highlighted.
[this is very important because we need to ensure we provide POL with the correct transaction records as they may be used by
defence and the court for litigation activity.
Date: 24-Nov-2010 16:54:53 Uscr:Andrew Mansfield
Sarah Selwyn has requested an audit maintenance release prior to the next DC AUDIT planned release due to go live on 14/05/2011.
lrive Peaks are requested for this maintenance release: PC0205805, PC0205806, PC0206531, PC0206590, PCO206622.
[This is an edited version of the text of Sarah's original email to Sheila Bamber:
FUJ00172221
FUJ00172221
le would like to get these Peaks targeted ASAP since these are impacting SSC and the Litigation Support Group in their support of
the Post Office litigations. There is a risk that these teams will not be able to fulfil their OLTs to the Post Office as defined
lin SVM/SDM/SD/0017 (Security Service Management: Service Description) .
ie would like to request an earlier test and deployment slot for PEAKs that are causing a significant business impact on the ssc
land Litigation Support teams ? the PEAKs for earlier deployment are:
lpco205805 and PC025806 ~ Litigation Support Group need to detect/highlight duplicate JSNs - enhancements to AUW to support
jauplicate JSN detection and reporting
Pco206531 - SSC ? takes too long to analyse events associated with ARQs due to the large volume of BAL events requires a change
to the filtering of financially significant vs benign events. A change to the presentation of the events to SSC is also required
to speed the process up.
ffesting requirements:
pco205805 and PC025806 ? use test files which include duplicate HNG-X transactions perform Fast ARQs which will now not fail on
Jauplicate detection and checking the spreadsheet output which will now report overlaps and duplicates. Test Horizon ARQs with
]auplicate JSN present to show duplicates ignored. Regression test for files with no duplicate JSNs both fast ARQ and filtering in
slow AROs.
[fhe BAL events reported in the event files output will now be of a smaller volume, nominated benign events will appear in the
rejects files (and this will constitute a large volume of total events) and the events spreadsheet will have a column heading at
the top of the spreadsheet. Regression test Gaps reporting is still present on spreadsheets. If time permits the workbook with a
number of spreadsheets as described in the PEAK rather than by manual process by the litigation team. However, this is yet to be
confirmed.
(Since Sarah's original email PC0206590 and PC0206622 have been raised to deal with issues around the large number of events.
Pco206531 is now solely to deal with the presentation of events.)
[Date:24-Nov-2010 16:59:47 Uscr:Andrew Mansfield
DEVELOPMENT IMPACT OF FIX:
SPECIFY THE HNG-X PLATFORMS IMPACTE!
ves - Audit Workstation.
IECHNICAL SUMMARY:
ffects AEClient.exe in the AUDT EXTRACT CLT workset.
ILIST OF KNOWN DIMENSIONS DI
\UDIT_ EXTRACT CLT
ESIGN PARTS AFFECTE!
BY THE CHANGE:
DEPENDENCI
DOES THE FIX REQUIRE ANY MANUAL DEPLOYMENT BASELINES:
INo
DEV EFFORT IN MANDAYS:
5 man days
HMPACT ON USER:
jbuplicates will be highlighted in the output of the ARQ process.
IMPACT ON TEST:
see details in previous response.
RISKS (of releasing and of not releasing proposed fix):
Integrity of audit data may be questioned in court.
[LIST OF LIKELY DELIVERABLES:
lAUDIT EXTRACT CLT
jDate:24-Nov-2010 16:59:58 Uscr:Andrew Mansfield
ction placed on Team:RelMngmnt Forum
JDate:25-Nov-2010 16:11:07 User:Tyrone Cozens
n hold until new ''Audit'' release decided (Adam Spurgeon looking into).
Jbate:03-Dec-2010 10:38:01 User:Tyrone Cozens
[fhe call Target Release has been moved to:Targeted At -- HNG-X 03.24
Jauthorised for 03.24 as agreed with Mark Jepson.
Jat c:03-Dec-2010 10:38:15 Usecr:Tyrone Cozens
Action has been removed from the call
[Dat e:24-Dec-2010 1!
Evidence Added -
8:59 User:Andrew Mansfield
FUJ00172221
FUJ00172221
fbate:24-Dec-2010 16:00:03 User:PIT Automated User
Reference Added: Product Baseline AUDIT EXTRACT CLT 0324 vo066
Product Baseline AUDIT EXTRACT CLT 0324 v066-V065
Ibate:24-Dec-2010 16:03:53 Uscr:Andrew Mansfield
{Start of Response]
Fixed by incremental baseline AUDIT EXTRACT CLT 0324 v066-v065
can be tested by perfoming both slow and fast ARQs with filter dates that will include some files in which duplicate records have
been created. The duplicate records will be reported in the results spreadsheet.
[Bnd of Response]
response code to call type V as Category 48 -- Pending -- Fix Released to PIT
jDate:24-Dec-2010 16:04:11 User:Andrew Mansfield
the Call record has been transferred to the team: Dev-Int-Rel
bate:31-Dec-2010 08:05:04 User:PIT Automated User
lkeference Added: Product Baseline AUDIT EXTRACT CLT 0324 D066-D065
JDate:05-dan-2011 08:28:27 User:Lionel Higman
[Start of Response]
[End of Response]
Response code to call type V as Category 49
the Call record has been transferred to the team: Live Support Team
fhe Call record has been assigned to the Team Member: Unassigned_
JDate:4i1-Jan-2011 09:45:45 User:Victoria Hancock
Reference Added: PCO207465
jDate:41-gan-2011
Reference Added:
Date: 41-Jan-2011 09:45:58 Usor:Victoria Hancock
Reference Deleted: Call reference PC0207465
bate:19-dan-2011 1
[Start of Response]
ested in LST as part of Audit Release 3.24
4:59 User:John Rogers
ror Hx Query outputs, any duplicate message sequences (or the test "NONE" if there are no duplicates) are now recorded in the
summary worksheet of the Query output spreadsheet.
ror Hx Query outputs, a duplicates column exists and is always populated with "NONE".
[End of Respon:
Response code to call type V as Category 60 -- Final -- S/W Fix Available to Call Logger
lkouting to Call Logger following Final Progress update.
Defect cause updated to 7 -- Design - High Level Design
Date: 19-Jan-2011 15:04:08 User:John Rogers
the Call record has been transferred to the team: Live Supp.Test
the Call record has been assigned to the Team Member: Release to Live
jbate:16-Mar-2011 15:19:45 Uscr:Mark Ascott
{fhe Call record has been transferred to the team: RM-x
jbate:27-Apr-2011 16:01:12 User:John Budworth
[Start of Response]
lapplied to live 03/02/2011 as part of Audit Release 03.24.
{End of Response]
response code to call type V as Category 60
Routing to Call Logger following Final Progre
Final -
8 update.
S/W Fix Available to Call Logger
Jbate:27-Apr-2011 16:04:08 User:Penny Thomas
CALL PC0205806 closed: Category 60 Type V
Root Cause Design - High Level Design
FUJ00172221
FUJ00172221
Logger Deleted User -- Security Ops
Subject Product HNG-X Platforms -- Audit Workstation (AUW) (version unspecified)
Assignee Deleted User -- Security Ops
Last Progress 27-Apr-2011 16:04 -- Penny Thomas