ISMS I
What are the general password construction requirements?
Minimum length: 8 characters (8–12 for admins)
Must include: Uppercase, lowercase, number, special character (at least 3 of 4 categories)
Define RAG? What is the meaning of R in this report.
The RAG Report (Red–Amber–Green Report) is a visual project or risk management tool used to quickly assess and communicate the status of tasks, risks, processes, or controls.
Red - Critical issue or non-compliance
Use/Action - Immediate action needed - major risk or failure to meet expectations.
Example of Policy Violations
1. Unauthorized Entry
2. Carrying Personal Bags into Restricted Zones
3. Use of Camera Phone Inside Operational Floor
4. Bypassing Security Checks.
5. Unauthorized Access to Secure Areas
Which of the following types of leave can be accumulated and encashed?
Privilege Leave
Designated Safety zones for Sector 74- IXC
2nd Floor
4th Floor
5th Floor
6th Floor
What physical security monitoring systems are used?
CCTV surveillance across all facilities
Monitored periodically, with retention policies
Security controls include:
Smoke detectors
Fire suppression systems
Water leak detectors
Manual call points
Access badges and ID cards.
What are the designated Break Timings as per the policy:
Break Hours cannot exceed more than 1 hour during the day.
If a female employee leaves office after 10:30 PM, what is the guideline regarding transportation?
She must use company transport only
TEAMS INVOLVED IN MANAGING THE BENCH PROCESS
Work Force Management (WFM) – primarily responsible for managing the Bench movements which includes primary, secondary project allocations and the Bench Pool creation.
Learning & Development – Will be responsible for any kind of upskilling training that may be identified for the employees.
Operations – Operations leaders will work with the WFM team to move associates to and from the Bench.
Elaborate Performance Incentive slab for voice process on Productivity range%
000%-100.99% - NIL Attendance - 2,000 = 2,000
101%-104.99% - 2,000 Attendance - 2,000 = 4,000
105%-109.99% - 3,000 Attendance - 2,000 = 5,000
110%-114.99% - 4,000 Attendance - 2,000 = 6,000
115%-119.99% - 5,000 Attendance - 2,000 = 7,000
120%-124.99% - 6,000 Attendance - 2,000 = 8,000
125%-129.99% - 7,000 Attendance - 2,000 = 9,000
130%-999% - 8,000 Attendance - 2,000 = 10,000
What if Information Security gets breached?
Loss of Customer Confidence
Reputation Loss
Loss of Goodwill
Financial loss
Calculation of Permission and Half day leave, Kindly brief about the process
1.Employees are required to strictly adhere to shift timings set for your process in the HRMS system
2.If on any occasion an employee comes late to office beyond 1hr and up to maximum of 3hrs, the system will record such late coming as ‘Permission’. If an employee is late beyond 3hrs, the system will mark half day leave by default
3.Permission (up to 3hrs) will be allowed up to 2 times in a calendar month. From the third occasion, it will be considered as half day leave.
INFORMATION IS CLASSIFIED AS
CONFIDENTIAL
INTERNAL
PUBLIC
What is the frequency for releasing RAG Report
RAG reports are released on Bi-weekly and monthly basis from OPEX.
If two employees refer the same candidate, who will be eligible for the referral bonus?
The one who sent the resume first (as per date & time)
How Can one Best Protect PHI or Other Protected Data?
Adhere to all Coronis Health’s password requirements and policies
Adhere to all Coronis Health’s email requirements when sending or transmitting information or data to an external party
Define Social Engineering, how to overcome this
If someone uses their personal relationship (friend/ peer/ superior) to gather confidential information
Measures to avoid:
• Do not discuss sensitive information or details with people if it not relevant to them • Even if they are yourfriends
According to the Social Media Policy, What's not allowed?
Creating pages using the company’s name without authorization
what is the source data for production in RAG Report
Source : Timesheets on Touch application.
What is OPEX? What is the objective of OPEX.
OPERATIONAL EXCELLENCE.
OPEX aim at exceeding customer satisfaction through ongoing improvement in processes by increasing efficiency, quality and reducing waste and cost by driving excellence in decision making.
Coronis Health deals with sensitive information such as:
Patient information (Social Security Number, Name, Date of Birth, Credit Card, Driver License, etc.)
Client information (Credit Card, Project Details, etc.)
Company information (Project names, Employee codes, Access codes, Usernames, etc.)
Types of Leave & How many Casual Leave, Sick Leave & Privilege leave are credited
Privilege Leave ▪ Casual Leave ▪ Sick Leave ▪ Maternity Leave ▪ Paternity Leave ▪ Bereavement Leave ▪ Compensatory Off
Casual Leave: 6 days per annum
Sick Leave: 6 days per annum
Privilege Leave : 12 days per annum
What is Eligibility criteria for Paternity Leave?
Male employees who have completed 80 working days in a period of 12 months are eligible to a maximum of 5 days of paternity leave
Which of the following actions can lead to disciplinary action according to the cab policy?
A) Eating or smoking inside company vehicle
B) Using abusive language with the driver
C) Not wearing an ID card in the vehicle
What are the stages of Progressive Discipline under DISCIPLINARY ACTION POLICY?
Verbal Warning
Written Warning
Level 1 Memo (1–5 days Loss of Pay)
Level 2 Memo (5–15 days Loss of Pay)
Suspension (Without Pay)
Termination with Benefits
Termination without Benefits
Note: Steps can be skipped for serious misconduct.