Acl Proof of Concept Analysis - Utl - 140507

ACL PROOF OF CONCEPT ANALYSIS

FOR

UGANDA TELECOM

BY

AH CONSULTING

M A Y 2 0 0 7

UGANDA TELECOM LIMITED PROOF OF CONCEPT ANALYSIS

1

Objective: The purpose of the Proof of Concept (PoC) was to prove that ACL can:

1. Interface with the disparate systems and extract data from the selected tables

2. Import and format the data as desired for the company’s product lines 3. Compare information for the disparate systems 4. Generate reports of the results of the analyses

Scope: The following analyses were performed: IN Platform:

Manual Recharge: 1. A comparison between the staff listing from Human Resources and the

telephone numbers of staff in the manual recharge listing from the IN platform. This is to identify non-staff whose accounts have been recharged.

2. Identify charges to staff numbers exceeding the authorised allocation by user account ‘eppcadm’ on days 30 April 2007 and 4 May 2007.

Card recharge: 3. Compare PINs loaded and activated onto the switch with those generated

from Finance department to identify if there are any PINs generated and activated onto the switch outside the Finance department for the 50,000 and 100,000 denomination cards.

Subscriber status: 4. Compare profiles of staff per the IN with those per the staff listing from

Human Resources department. This is to identify subscribers with the staff profile on the IN yet they are not authorised staff members.

5. Age active subscribers per the IN

Data:

BWDATA 6. A comparison between the Bandwidth Manager data (BWDATA) of

Client, Speed and Status against the TABs system (CRM_USER_INFO table)


2

Fixed line:

NGN Switch 7. A comparison between the Postpaid and Prepaid subscriber account

status per the NGN switch and the TABs system (CRM_USER_INFO table)

EWSD Switch 8. A comparison between the Postpaid and Prepaid subscriber account

status per the EWSD switch and the TABs system (CRM_USER_INFO table)

OCB Switches 9. A comparison between the Postpaid and Prepaid subscriber account

status per the OCB switches and the TABs system (CRM_USER_INFO table)

Sun Accounting:

Accounts reference file 10. Interface with the SQL database and import records into ACL

Ledger file 11. Interface with the SQL database and import records into ACL

Sun reference file 12. Interface with the SQL database and import records into ACL

Data sources used: The table below shows the sources of data for analyses performed Data Source Format IN (manual recharges) IN Server Flat files Staff listing HR Department Excel spreadsheet IN (PINS) IN Server Flat files PINS generated Finance Department IN (PPS status) IN Server Flat files BWDATA Bandwidth Manager Data Dumps Customer user information TABS System ORACLE Server Fixed Line subscribers NGN Switch Data Dumps Fixed Line subscribers EWSD Switch Data Dumps Fixed Line subscribers OCB Switch Data Dumps Sun Accounting Sun Systems SQL Server


3

Proof of Concept analysis results: The tables below show results of the analyses carried out. Where duplicate and erroneous records were noted, they were ejected from the analysis and stored in separate tables for follow up. Within the results we identify areas of required follow up and evidence that ACL can read off the selected Application Systems and Databases. Note that the occurrence of duplicate records is in itself a concern. IN Platform (Manual Recharge): A total of 28,651 manual recharge records were imported from the IN dump with statistics as shown in the table below within the period of 1 Jan 07 to 9 May 07. 16,170 of the recharges were negative values which were removed from the analysis. Amount Number Total Average Range - 5,670,000 -Positive 12,481 537,637,716 43,076 Negative 16,170 -6,729,553 -416 Zeros - - -Totals 28,651 530,908,163 18,530 Abs Value - 544,367,269 -

A summary of this data revealed that a total of 4,588 subscriber accounts received a manual recharge at least once during this period. 1,059 records were imported from the Excel worksheet of staff data. A clean up of all non ‘071’ references left 938 records. Of these 7 duplicate PF_No records were detected as shown in the table below and also removed leaving 931 records.

PF_No Allocation Business_Unit First_Name Last_Name Mobile_Number Rank

50195 30,000 Commercial WILFRED AKIKI «23 spaces» Point of Sales Agent

50195 30,000 Commercial OLIRUS AKIKI WILFRED 071-2168446

Relief Point of Sales Agent

50378 0 Managing Director MWITI STELLA 071-2488398

Executive Assistant

50378 0 HR & Administration STELLA MWITI 071-2488398

Executive Assistant

50397 150,000 Technical DERRICK SEBAALE 071-2616820 Transmission Network


4

PF_No Allocation Business_Unit First_Name Last_Name Mobile_Number Rank

50397 100,000 Technical SEBAALE DERRICK 071-2520230

Transmission and BSS planning Engineer

50476 80,000 Commercial RONALD MWESIGWA 071-2684531

Accounts Relationship Manager

50476 200,000 Commercial EDWARD MUGULUSI 071-2220243 Events Manager

50636 10,000 «28 spaces» «44 spaces» Ngabirano Micheal 071-2382 106 OH

50636 10,000 «28 spaces» «44 spaces» Baryehuzya Frank 071-2029940

Regions - Rukungiri

50667 20,000 Commercial BERNARD ASABA 071-2972710 Call Centre Agent

50667 20,000 Commercial BERNARD ASABA 071-2972710 Call Centre Agent

50668 20,000 Commercial NATASHA NAKIYEMBE 071-2596945 Call Centre Agent

50668 20,000 Commercial NATASA NAKIYEMBE 071-2596945 Call Centre Agent

The 4,588 records from IN were joined to the 931 staff data revealing that 3,721 subscriber accounts received credit by manual recharge yet they were not on the staff data listing. Of these, 446 subscriber accounts were credited by the ‘eppcadm’ account who is authorised to perform the recharges.

Staff with recharge amounts in excess of allocation:

Our analysis also revealed that of the staff receiving manual recharges, some were in excess of the authorised allocation per the staff data listing as shown in the table below.

Name Mobile No. PF_No Amount Allocation AKILA 712006611 0 40000 20000 Murali Jackie 712200625 0 20000 0 Atwine Rogers 712215733 0 20000 0 BEN MWINE 712253126 10000 40000 20000 Murangira Kenneth 712295544 0 10000 0 NYAKUNDI 712334447 50556 250000 0 Damba Esther 712380252 0 10000 0


5

Name Mobile No. PF_No Amount Allocation Kusiime Jackline 712384802 0 10000 0 Haumba Cathy 712392007 0 10000 0 Mwesigwa Brian 712400060 0 88000 0 KIRINDA 712462072 50434 275000 200000 Kanyesigye Dickson 712522168 0 30000 0 Atuhaire .A. Hellen 712539103 0 103025 0 Namulema Sarah 712627211 0 20000 0 Kato Gershom 712640429 0 88000 0 Damulira William 712665296 0 88000 0 Kaitesi Gloria 712700144 0 165000 0 Kairumba Winnie 712811161 0 20000 0 Musinguzi Johnson 712812460 0 103025 0 LINDA KIBOMBO 712868738 10000 40000 20000 Aijuka Douglas 712922255 0 40000 0 Kyobe Luke 712924640 0 8000 0 Wairimu Lillian 712935381 0 103125 0 Atuhairwe Maserina 712939093 0 10000 0 Sebahiire Vianney 712975372 0 40000 0 Kahangire Nicholas 712980905 0 40000 0 KHAUKA 714212121 0 40000 20000

Dealers and the amounts recharged

We extracted from the IN profile all subscribers with the profile ‘5’ which is used by dealers which was cross-linked to the recharge accounts to very the amounts credited to dealer accounts. The table below shows the dealer numbers.

Subscriber Number Status Validity date

712201020 ACTIVE 07/28/2007 712571229 ACTIVE 06/10/2007 714900073 ACTIVE 01/08/2008 714900063 ACTIVE 03/23/2008 714900064 ACTIVE 07/07/2007 714900077 ACTIVE 07/05/2007 714900079 ACTIVE 05/08/2008 714900080 ACTIVE 05/07/2008 714900000 ACTIVE 01/24/2008


6

We then determined the amount allocated per dealer as shown in the table below.

Dealer number Amount recharged Date ID

712201020 nil 712571229 nil 714900073 nil 714900063 nil 714900064 nil 714900077 nil 714900079 nil 714900080 926 03/21/2007 sydney

714900000 5,000,000 01/24/2007 eppcadm

714900000 5,000,000 01/25/2007 eppcadm

There is evidently one dealer of concern who received 10 million worth of credit over a two day period. Aging of subscribers:

The table below shows the results of aging of subscriber validity dates usingthe ACL aging command with a cutoff date of 31 May 2008 being the maximum attainable.

Days Count Percent of Count

0 - 29 155,828 35.65%30 - 59 72,509 16.59%60 - 89 28,407 6.50%90 - 119 21,599 4.94%120 - 10,000 158,796 36.33%Totals 437,139 100%

The results show that approximately 36% of subscribers are valid maturing in the month of May 2008 while another approximately 36% are have validity dates expiring within the next 29 days of May and June 2007. The graph overleaf, also generated within ACL, shows diagrammatic representation of the above table.


7

Subscriber accounts with staff profile yet not staff members: The table below shows the status of subscribers on the IN platform. 77% of subscribers or 437,139 were found to be active.

Status Count Percent ACTIVE 437,139 77%BLOCKED 21 0%DEACTIVE 47,295 8%GRACE 9,753 2%INACTIVE 43,555 8%UNUSED 30,950 5%Totals 568,713


8

We profiled the 437,139 active subscribers with results shown as in the table below. Of interest were the 1,445 subscribers included under the staff profile and therefore deriving staff benefits and privileges.

Profile Count 0 1 1 72,058 2 292,460 3 9 4 78 5 9 6 42,426 7 4 8 715 9 1,445

10 6,025 11 202 12 226 14 12 15 2 16 21,467

Totals 437,139 Our analysis of the 1,445 subscribers against the staff listing from the Human Resources department revealed the following summarised in the table below. Switch Staff listing Total Switch 644 801 1445Staff listing 801 131 932Total 1445 932

This shows that 644 numbers were found to have the staff profile ‘9’ while not appearing on the staff data listing. Also 131 staff per the staff data listing did not have a staff profile on the switch. Note also that one of the subscribers was of profile 0 which is strange since there are no known tariff plans for the said profile (Source: Internal Audit). The subscriber details are shown in the table below. Subscriber Number Status Validity date

712398211 ACTIVE 01/28/2008


9

Test call numbers: We also identified test numbers which have the profile numbers ‘3’ and ‘7’ totalling 13 numbers as shown in the table below. It is important to monitor the use of the test call numbers to avoid misuse and abuse or even fraudulent transactions.

Subscriber number Status Validity date Profile

712910976 ACTIVE 09/14/2007 3 712911086 ACTIVE 09/14/2007 3 712911087 ACTIVE 09/14/2007 3 712910991 ACTIVE 09/14/2007 3 712910985 ACTIVE 09/14/2007 3 712910986 ACTIVE 09/14/2007 3 712910987 ACTIVE 09/14/2007 3 712666308 ACTIVE 06/25/2007 7 712298027 ACTIVE 09/14/2007 3 712627036 ACTIVE 08/31/2007 7 712128997 ACTIVE 08/26/2007 7 712260498 ACTIVE 06/12/2007 7 712298028 ACTIVE 10/14/2007 3

PINs generation and activation analysis: The table below shows the sample PINs generated by the Finance department to be used in the analysis and the serial number ranges.

Dealer Date Value Batch_no Quantity 1st Serial no. Last Serial no.

X-Tel 14-Dec-06 2,000 0200006

100,000 020000600000000 020000600099999

X-Tel 14-Dec-06 4,000 0300001

100,000 030000100000000 030000100099999

TelChoice 02-Jan-07 100,000 0900001

100,000 090000100000000 090000100099999

TelChoice 02-Jan-07 20,000 0700001

100,000 070000100000000 070000100099999

TelChoice 02-Jan-07 50,000 0800001

100,000 080000100000000 080000100099999

Ellams 22-Jan-07 10,000 0600001

100,000 060000100000000 060000100099999

Ellams 22-Jan-07 10,000 0600002

100,000 060000200000000 060000200099999

Ellams 22-Jan-07 10,000 0600003

100,000 060000300000000 060000300099999

Ellams 22-Jan-07 10,000 0600004

100,000 060000400000000 060000400099999

Ellams 22-Jan-07 20,000 0700002

100,000 070000200000000 070000200099999


10

Dealer Date Value Batch_no Quantity 1st Serial no. Last Serial no.

SC 22-Jan-07 4,000 0300002

1,000,000 030000200000000 030000200999999

Ellams 22-Jan-07 50,000 0800002

100,000 080000200000000 080000200099999

Nile Bank 5-Feb-07 10,000 0600005

100,000 060000500000000 060000500099999

The table below shows the summary of results from the analysis of the 50,000 and 100,000 denomination cards against listing of activated cards at the Switch. 50,000 denomination card Quantity Total number of cards activated at Switch 432

Cards within the 080000100000000 - 080000100099999 range 0

Cards within the 080000200000000 - 080000200099999 range -315 Cards not matched to Finance department 117

100,000 denomination card Quantity Total number of cards activated at Switch 766

Cards within the 090000100000000 - 090000100099999 - Cards not matched to Finance department 766

The tests above show that clearly for the 50,000 denomination there are some PINs activated at the switch that were not generated from the Finance Department. Note however that for the 100,000 denomination there was insufficient information to conclude. OCB, EWSD, BWDATA Subject to available time prior to the EXCO meeting Tuesday 15 May 2007, to which this report was to be presented, we were unable to complete the analyses using the OCB, EWSD and BWDATA. It was therefore agreed that we include screen shots of the reports in their natural text dump format and of the ACL imported format. These are shown as overleaf. The screenshots server to prove that ACL was able to read data off the variated text dump formats and create meaningful data for use in analyses.


11

Screen shots: OCB Text dump

ACL Import of OCB Data


12

BWDATA Text dump

ACL Import of BWDATA Data


13

EWSD Text dump

ACL Import of BWDATA Data


14

Sun Accounting: An SQL link was established with the Sun Accounting system of which the following tables were extracted for proof purposes. Note that being database links, the tables can be continually updated when changes are made to he originating database by commanding a refresh function on a time specified interval. Accounts reference file:


15

Sun reference file:

Ledger file:


16

Synopsis: The above few analyses, which do not even extend to an analysis of CDRs, show that there are exceptions on the onset that management should address. Using ACL as a tool will allow management the independent assurance of the existing processes and systems in place. Given the tool’s flexibility even future planned systems will be able to interface with ACL seamlessly. All of the analyses can be automated, which also frees time for creating reports, to the all more important aspect of analysing them and making timely, informed decisions. NB: The results from the tests should not be taken to be complete and final without the additional analyses that would be required in an ordinary ACL system analysis.

Acl Proof of Concept Analysis - Utl - 140507

Documents

Transcript of Acl Proof of Concept Analysis - Utl - 140507