GSS commences every project by establishing clear objectives for Extra Low Voltage (ELV) systems. This involves a thorough understanding of the company's profile and business processes, enabling the confirmation and refinement of the project scope to align with ELV requirements.
GSS conducts a comprehensive survey of ELV systems, compiling detailed registers covering hardware, software, and data components. The existing governance framework is examined, specifically within the context of ELV, encompassing policies, procedures, roles, responsibilities, controls, and regulatory requirements. Network architecture mapping is executed to ensure a robust foundation.
The current capability of ELV systems is assessed, considering factors such as security level and maturity/tier level. GSS evaluates the existing security level of the network architecture supporting ELV systems. Simultaneously, a threat assessment is conducted to establish target protection and network architecture security levels.
Utilizing industry best practices, GSS conducts a structured risk assessment for ELV systems. This includes scoping, business impact assessment, threat profiling (building upon the capability assessment), vulnerability assessment, risk evaluation, and risk treatment.
GSS takes proactive steps in implementing ELV systems. This involves defining requirements for the governance framework specific to ELV systems and producing a draft for approval. Data classification is conducted, and control measures are finalized based on the output of the risk assessment, ensuring compliance with the established governance framework. The documentation of the governance framework is thoroughly reviewed and finalized before the actual implementation of ELV control measures.
By systematically addressing ELV systems within these phases, GSS ensures that these critical components are seamlessly integrated into projects, contributing to a safe, efficient, and technologically advanced environment.