Project : Payment Software installation at a client bank in Caribbean
1- Project product or service description By installing our payment software, it will allow the bank to:
Process transactions for the Member Institutions
Provide an ISO8583 Switch Interface to support EMV transactions
Continue to support the existing Switch Interface until all conversions to the EMV interface by Member Institutions are complete
Reporting & Settlement functionality to support the bank business operations
The project includes professional services, to be provided by us, associated with the installation and configuration of our payment software.
2-
Project Objective
Replace the existing Share Switch with our technology that: a) EMV-compliant b) Retains the information content of existing transactional, operational and settlement reporting c) Enables a non-disruptive migration approach to full EMV-compliant transaction processing by maintaining support for the current interface to Member Institution systems.
3- Project Scope
Main Project Deliverables. 1. Our SW Version 6.x configured as follows: a. PCI Certified and EMV Enabled Base System i. Transaction Management Engine ii. Oracle database support iii. Thales Host Security Module support iv. TCP/IP communications support b. EMV-compliant ISO8583 formatter c.
Operational, Statistical and Settlement reports
d. Certification Simulator
Key Stakeholders.
Bank General Manager Bank Technology Manager Project Director (Our Company) Vice President Operations (Our Company)
External Stakeholders. Bank Members Institutions
Restrictions. The timely implementation of the Switch depends on certain information that the client will have to obtain from 7 Member Institutions.
The information required from 7 Member Institutions is: 1. Zone Master Key (ZMK / KEK), Pin Encryption Key procedures and requirements imposed by the client that are required for on-line transaction processing for transactions originated at POS or ATM sponsored by member institutions on the client network. 2. On-Line interface specifications from client, configurations & setup specifications for test and production environments and testing and certification procedures. 3. Settlement specifications and requirements between Member Institutions and client. Also, Dispute Resolution procedures. 4. Decision regarding the use of transaction limits for on-line transactions. 5. Decision regarding the use of tiered fixed fee and discount pricing fees 6. Notification and specifications related to local regulatory compliance as they arise.
Assumptions. The client will assume the role of project integrator and will take responsibility for the co-ordination and completion of project tasks assigned to the following participants:
Client Itself. All 7 Member Institutions
The communications interface between the sw interface and the member institutions will be TCP/IP. Client to share such specifications as part of requirements gathering exercise for the message formats and logic flow to be used.. Client will provide the following: Test Thales HSM Test Encryption Keys Test Connection to each Member Institution A secure channel for our technical staff that enables remote access.
Project Limitations. Based on our experience with similar projects, we believe that the most significant limitations affecting the successful implementation of this project are: a) The availability of key people to manage and conduct certification tests between Member Institution Switches and Client. b) The availability of up-to-date documentation and other supporting material that will affect development tasks and acceptance testing against requirements.
Project Milestones Infrastructure procurement and set-up System Configuration & development Functionality Tests & Integration Go-Live
Critical Success Factors of the Project
Establishment and maintenance of a single point of contact for both the client and us for all project elements
Timely procurement of hardware (servers, HSMs) Timely procurement of database software Timely sign-off of project documents
Continuous involvement of top-level management from both the client and us
Timely completion of Member Institution certifications
Adherence to project management methodology especially: communication plans, change management, status reporting, issue management, escalation processes.
Activities: Establish test systems network connectivity 1. We to provide connection parameters of test system. 2. We to generate and export the following key components: ZMK, - used for online transaction testing ZPK, - used for PIN translation 3. We to commence transaction testing – standard interface testing scenarios
4. 5. 6.
Client to perform tests with test card on member test ATM and POS devices (to be done on actual ATMs and POS devices) authorized by us. User Acceptance Testing Production setup a. Live systems network connectivity b. Get live ZMK and load. c.
Pilot testing
Required Resources Estimated: 1. “Hardware” (physical or virtualized) infrastructure: For Production Deployment, the Switch product can be installed upon creating the network infrastructure as suggested by us. For Testing and Certification, The client will need to provide base hardware and software equal to that of the production environment. Processor speed, memory and disk space which can be smaller. Client will need to consult us on the elements to be provided. Beside the server related base elements, the client will need to provide test hardware for the following: Test HSM Test Encryption Keys Test Connection to Institutions VPN Access for our Technical staff for remote access 2. Software Same base software products and versions as the ones used production environment. 3. Software Development Team Director Software Development and Support Software Engineers Switch Development Team Lead
3 Switch Developer
4. Infrastructure Support
1 IT support team
5. Project Manager/ Subject Matter Expert
Project PM
6. Project Auditor
Project Auditor team
7. Quality Assurance
1 Quality Assurance Analyst
8. Third party Components/Participation
Thales VMware Oracle Red Hat Enterprise Linux
Project Estimated Costs: Approved Budget: 170,000 USD
High Level Estimated Key Dates: th
Replace Switch in Production: 16 November 2016
Project Minicharter Project Project manager Project artifacts Business need and business benefits
Objectives
Scope
Deliverables
#REF! Project # #REF! #REF! Sponsor #REF! #REF! Updated #REF! Ins ta l l Swi tch a nd requi red modul es tha t wi l l a l l ow the cl i ent: 1. Identi fy a l l tra ns a cti ons tha t wi l l be proces s ed by the Swi tch. 2. Identi fy a nd s egrega te tra ns a cti ons of member i ns ti tuti ons . 3. Accept EMV Ca rds on devi ces (ATM a nd POS) on network cha nnel s 4. Integra te the cl i ent s ha red s ervi ce network a nd es ta bl i s h connecti on between member i ns ti tuti on hos ts & the s wi tch. 5. Recei ve a nd Proces s Tra ns a cti on Mes s a ges ori gi na ted for member i ns ti tuti ons when the tra ns a cti on i s i ni ti a ted from the cl i ent network. 6. Appl y the rul es requi red by the cl i ent. 7. Produce s ettl ement reports tha t wi l l hel p the cl i ent properl y s ettl e the tra ns a cti ona l a cti vi ty deta i l ed a bove. 8. Moni tor Ins ti tuti on network. 9. Enha nce s ys tem performa nce by reduci ng s ys tem downti me a nd ti meouts . 10. Provi de tra i ni ng to the cl i ent on s oftwa re s ol uti ons 1. ISO8583 formatter (To exchange EMV on-line transaction requests from/to Network) 2. REX formatter (To exchange Non-EMV on-line transaction requests from/to Network) 3. Acquire EMV transactions by enabling bit 55 4. Reporting & Settlement 5. Certification Simulator In Scope Software Swith ISO8583 Switch Interface REX Switch Interface Reporting & Settlement EMV acquiring Switch Simulator Deliverable Project Charter SRS (Software Requirement Specifications) SDD (Software Design Description)-- Internal Infrastructure Setup
Out of Scope
Due Date
Key considerations Assumptions, Constraints & Dependencies A- the cl i ent wi l l a s s ume the rol e of project i ntegra tor; tha t i s , cl i ent wi l l ta ke res pons i bi l i ty of coordi na ti ng a nd performi ng fol l ow-up towa rds compl eti on of overa l l a cti vi ti es corres pondi ng to bel ow pa rti ci pa nts : 1) Cl i ent Its el f. 2) Al l 7 member ba nks 3) Others
Category
Risks Risk Description
Ava i l a bi l i ty of our Res ources a hea d of cl i ent projects to be del i vered before October 2015
Pers onnel A- Client wi l l be the project i ntegra tor does not mea n tha t ea ch of the pa rti ci pa ti ng i ns ti tuti ons wi l l not need to a ppoi nt thei r own project coordi na tor or project ma na ger; on the contra ry, i t i s recommended tha t ea ch pa rti ci pa ti ng pa rty a ppoi nts a project ma na ger a s s i ngl e poi nt of conta ct. Technol ogi ca l Reports A- The communi ca ti ons i nterfa ce between Swi tch a nd the member i ns ti tuti ons wi l l be ba s ed on TCP/IP a nd the mes s a ge forma ts a nd l ogi c fl ow to be us ed. Cl i ent to s ha re s uch s peci fi ca ti ons a s pa rt of requi rements ga theri ng exerci s e. Technol ogi ca l Swi tch Si mul a tor D- The dri vi ng i ns ti tuti ons for a project l i ke thi s i s the 7 member i ns ti tuti ons , s o i n order to s et project expecta ti ons i n terms of da tes the cl i ent needs to enga ge wi th the 7 member i ns ti tuti ons for s chedul i ng a certi fi ca ti on exerci s e. A- Client wi l l need to provi de tes t ha rdwa re for the fol l owi ng: 1) Tes t Tha l es HSM 2) Tes t Encrypti on Keys 3) Tes t Connecti on to 7 member ba nks 4) VPN Acces s for our Techni ca l s ta ff for remote a cces s .
Success criteria
1 - Cl i ent wi l l be a bl e to a cqui re tra ns a cti ons from Swi tch by connecti ng wi th 7 member fi na nci a l i ns ti tuti ons us i ng ISO8583 a nd become EMV Com 2 - Cl i ent wi l l proces s tra ns a cti ons ori gi na ted wi thi n the Is l a nd (ATM’s & POS termi na l s ) a nd tra ns a cti ons routed through the Swi tch, whi ch i n turn wi l l provi de the front-end s ervi ces a nd the s ettl ement a nd cl ea ri ng s ervi ces . 3 -Reports & Settl ement fi l es a s bei ng reques ted by cl i ent genera ted of Swi tch 4 - Swi tch Si mul a tor
Stoplight Report #REF! #REF! #REF!
Project Project manager Project artifacts
1
2
3
#REF! #REF! #REF!
Project # Sponsor Updated Deliverables 5 6
4
7
8
9
Schedule Scope Cost Risk Issues Planned completion Est. completion Milestones
Title/Description 1 2 3 4 5
Title/Description 6 QA testing 7 UAT testing & Certification 8 Go-Live 9 10
Project Initiation Completed Project Planning Completed Infrastructure Done System configuration & Development Functionality Tests & Integration
Budget Project Project manager Project artifacts
#REF! #REF! #REF!
#REF! #REF! #REF!
Project # Sponsor Updated
Budget Status Approved Budget
Planned Expenditures to Date
Actual Expenditures to Date
$170,000.00
$0.00
$0.00
$0.00
Planned Remaining Budget
Actual Remaining Budget
Variance
$170,000.00
$170,000.00
$0.00
Additional $ needed
Variance
10
Risk Management Matrix (Risk Register) #REF! #REF! #REF!
1 Reports
4
2 Switch Simulator
3 Resouce Availability Non Payment by the 4 client
4
4 1
4
4
4 4
4
4
4 4
Importance
Detectability
Risk Description
Impact
ID
Probability
Project Project manager Project artifacts
128
128
128 32
5
0
6
0
7
0
8
0
Category
Technological
Technological
Trigger Event/Indicator
Risk Response and Description
Owner
Status
Date Entered
PM
Open
20-Jun-16
PM
Open
20-Jun-16
PM/ Get support from our Peru Development Office Director
Open
22-Jun-16
PM/Finance Office
Open
22-Jun-16
Contingency Plan
Already Identified
Already Identified
Mitigate: we currently do not have switch Simulator and specifications must Specifications must be be written / shared with written & provided to Technical team technical team Accept: 3 switch resources in Toronto are busy with other projects as well. We have to plan alternate for this event
Date to Review
1) This is a known risk and plan needs to be created to get these reports configured for the client to test
Mitigate:Gap analysis needs to be conducted between Requirement document / resport specifications provided by the client and what is available in switch
Personnel Financial
#REF! #REF! #REF!
Project # Sponsor Updated
2) Extracts needs to be provided in the interim if in case reports could not be finished before GoLive
Non clearence of Invoices for over 30 days
Deliverable Milestones #REF! #REF! #REF!
Project Project manager Project artifacts
ID
Milestone
1 Project Initiation Completed 2 Project Planning Completed 3 Infrastructure Done 4 System configuration & Development 5 Functionality Tests & Integration 6 QA testing 7 UAT testing & Certification 8 Go-Live 9
Project # Sponsor Updated
Description
Planned Actual Completion Completion
Objectives
#REF! #REF! #REF!
Assumptions
Constraints
Roster Project Project manager Project artifacts
Name
#REF! #REF! #REF!
#REF! #REF! #REF!
Project # Sponsor Updated
Core/ Extended Team
Title
Dept.
Phone
Cell Phone
E-Mail
Project Role
TBD
Extended
Software Developer
Development
TBD
Core
Development Lead
Development Lead
TBD
Core
Software Developer
Development
TBD
Extended
Project Director
Project Director
TBD
Core
Project Manager
PM
TBD
Core
Project Manager
TBD
Extended
Vice President - Marketing
TBD
Extended
System Administrator
System Admin
TBD
Core
Director-Development
Development Director
PM Project Auditor
Roles and Responsibilities #REF! #REF! #REF!
#REF! #REF! #REF!
Project # Sponsor Updated
% Assigned
Project Project manager Project artifacts
Name
Core/ Extended Team
TBD
Extended
Development
Switch - Development
TBD
Core
Development Lead
Switch - Development
TBD
Core
Development
Switch - Development
TBD
Extended
Project Director
PM
TBD
Core
PM
PM
TBD
Core
PM
PM
TBD
Extended
Project Auditor
PM
TBD
Extended
System Admin
System Admin
TBD
Core
Development Director
Deliverables Leading
Deliverables Participating On
Project Role
Responsibility
Other Project Assignments
Group
Switch- Development
Assumptions, Constraints & Dependency #REF! #REF! #REF!
Project Project manager Project artifacts ID
Description A- Cl i ent wi l l a s s ume the rol e of project i ntegra tor; tha t i s , Cl i ent wi l l take res pons i bi l i ty of coordi na ting a nd performi ng fol l ow-up towa rds compl etion of overa l l a ctivi ties corres pondi ng to bel ow pa rtici pa nts :
#REF! #REF! #REF!
Project # Sponsor Updated
Comments
Type
Status
Date Entered
1) Cl i ent Its el f. 2) Al l 7 member ba nks 3) Others
1
Assumption/Constraint
Open
20-Jun-16
Assumption
Open
20-Jun-16
Assumption
Open
20-Jun-16
Dependency
Open
20-Jun-16
Assumption/Constraint
Open
20-Jun-16
A- Client wi l l be the project i ntegra tor does not mea n tha t ea ch of the pa rtici pa ting i ns titutions wi l l not need to a ppoi nt thei r own project coordi na tor or project ma na ger; on the contra ry, i t i s recommended tha t ea ch pa rtici pa ting pa rty a ppoi nts a project ma na ger a s 2 s i ngl e poi nt of contact. A- The communi ca tions i nterfa ce between the network a nd the member i ns titutions wi l l be ba s ed on TCP/IP a nd the mes s a ge forma ts a nd l ogi c fl ow to be us ed. Cl i ent to s ha re s uch 3 s peci fi ca tions a s pa rt of requi rements ga theri ng exerci s e. D- The dri vi ng i ns titutions for a project l i ke thi s i s the 7 member i ns titutions , s o i n order to s et project expectations i n terms of da tes the cl i ent needs to enga ge wi th the 7 member 4 i ns titutions for s chedul i ng a certifi ca tion exerci s e. A- Client wi l l need to provi de tes t ha rdwa re for the fol l owi ng: 1) Tes t Tha l es HSM 2) Tes t Encryption Keys 3) Tes t Connection to 7 member ba nks 4) VPN Acces s for our Techni ca l s taff for remote a cces s .
5 6 7
Decision Log #REF! #REF! #REF!
Project Project manager Project artifacts
ID
Decision Description
1 We suggested the client to get 4 HSM's
#REF! #REF! #REF!
Project # Sponsor Updated
Comments
Owner
Bank GM - Confirmed they would like to go with 3 HSMs instead on 4 on email dt:Tuesday, May 31, 2016 10:35 AM
PM
Status
Closed
Date Entered
Tuesday, May 31, 2016 10:35 AM
2 3
Communication Plan JETS
Project Project manager Project artifacts
ID
#REF! #REF!
Communication
Description
#REF! #REF! #REF!
Project # Sponsor Updated
Frequency
Format
Owner
Recipient/ Attendees
1 Project Status (Management Meeting)
Project Status
Weekly (Wednesday)
Email
Project Manager PM Team
2 Project Status (Management Meeting)
Project Status
Weekly (Tuesday)
Email
Project Manager Executive management team
3 Project Meeting
Status Review & Concerns
4 Risk Response
Risks & Issues
5 Development
Development Progress
5
Fortnightly Monthly Weekly (Wednesday)
Boardroom Project Manager Project Team & Sponsor Boardroom Project Manager PM team & Development Director Development Boardroom Director PM & Development team
Stakeholder Analysis Project Project Manager Project Artifacts
#REF! #REF! #REF!
Project # Sponsor Updated
ID
Role
Impact
Stakeholder
#REF! #REF! #REF!
Risk Influence Tolerance
0
1
0
1) Resource Assignment 2) SDD- Direction & Code Review 3) Development status update & escalations
Technogical Guidance and resourcing
4
4
3
1) Project Management 2) Development Manager
1) Responsible for Project communication
5
5
5
1) Project Sponsor with approving authority
Project Sponsor
4
5
0
2 TBD
Project Director
5
5
3 TBD
Development Director
2
4 TBD
Technology Manager (client)
5 TBD
General Manager (client)
7 8 9 10 11 12
Responsibility
Project Auditing 1) Responsible to Manager Project team & BA. 2) Product & Technological consultation
Project Sponsor
6
Needs
1) Project to be accomplished within specified time 2) Project output should be as desired and QA certified 1) Project Documentation 2) Project status reporting
1 TBD