1. © Mahindra Satyam 2009 Quality Certifications at Mahindra Satyam

2. 2 © Mahindra Satyam 2009 Purpose This presentation provides a high-level view of the quality standards / models implemented in Mahindra Satyam. This can be used for demonstrating our quality system to the customers

3. 3 © Mahindra Satyam 2009 Quality Certifications at Mahindra Satyam: Snapshot ISO 9001:2008 ISO 27001 / BS7799 ISO 20000 / BS15000 SEI CMM SEI CMMI Ver 1.1 CMMI For Development Ver 1.2 AS9100 / EN9100 Automotive SPICE PATHFINDER™ Payment Card Industry(PCI- DSS 1.1) PCMM OHSAS 18001:1999 BS25999

4. 4 © Mahindra Satyam 2009 ISO 9001: 2008 : What is it? ISO 9001:2008 specifies requirements for a quality management system where an organization – Needs to demonstrate its ability to consistently provide product that meets customer and applicable regulatory requirements, and – Aims to enhance customer satisfaction through the effective application of the system, including processes for continual improvement of the system and the assurance of conformity to customer and applicable regulatory requirements All requirements of this International Standard are generic and are intended to be applicable to all organizations, regardless of type, size and product provided

5. 5 © Mahindra Satyam 2009 ISO 9001: 2008 : At Mahindra Satyam Mahindra Satyam achieved ISO 9001:1994 certification in March 1995 and got upgraded to ISO 9001: 2000 in March 2001 & ISO 9001:2008 in October 2009 World-wide first certification by BVQI, UK under ISO 9001 / TickIT The re-certification audit is conducted by TUV, India

6. 6 © Mahindra Satyam 2009 ISO 27001 / BS7799 : What is it? The ISO 27001 standard was published in October 2005, essentially replacing the old BS7799-2 standard. It is the specification for Information Security Management System (ISMS) BS7799 itself was a long standing standard, first published in the nineties as a code of practice. As this matured, a second part emerged to cover management systems. ISO 27001 enhanced the content of BS7799-2 and harmonized it with other standards. A scheme has been introduced by various certification bodies for conversion from BS7799 certification to ISO27001 certification

7. 7 © Mahindra Satyam 2009 ISO 27001 / BS7799 : At Mahindra Satyam In October 2009 Mahindra Satyam was re-certified for ISO 27001 by TUV India In December 2002 Mahindra Satyam was first certified for BS7799 by STQC Global Certification

8. 8 © Mahindra Satyam 2009 ISO 20000 / BS15000 : What is it? ISO 20000, which replaces BS 15000, provides a standardized way of verifying that an organization has successfully adopted IT Service Management best practices as defined by ITIL ITIL has been a de facto standard for service management for almost 20 years BS 15000, a British standard first issued in 2000 to promote the adoption of an integrated process approach to the effective delivery of IS services, is based on ITIL ISO 20000 was created via a fast track from BS 15000

9. 9 © Mahindra Satyam 2009 ISO 20000 / BS15000 : At Mahindra Satyam The internal support unit, Network and Systems of Mahindra Satyam at all locations in India is certified for ISO 20000 by TUV, India in October 2009 Infrastructure Management Systems (IMS) business of Mahindra Satyam is also certified for BS15000 at Chennai, Hyderabad and Cleveland. The certification audit was conducted by BVQI, UK in July 2005

10. 10 © Mahindra Satyam 2009 SEI CMM : What is it? The Capability Maturity Model (CMM) was developed by the Software Engineering Institute (SEI) at Carnegie Mellon University in Pittsburgh CMM is a collection of instructions an organization can follow with the purpose to gain better control over its software development process CMM ranks software development organizations in a hierarchy of five maturity levels, each with a progressively greater capability of producing quality software. A maturity model can be used as a benchmark for assessing different organizations for equivalent comparison

11. 11 © Mahindra Satyam 2009 SEI CMM : At Mahindra Satyam Assessed at CMM Level 5 in March 1999 Ninth company in the world to be assessed at CMM Level 5 Assessment was done by Richard Knudson, Lead assessor from Global System Technology, USA Scope covers all development centers and services delivered out of India

12. 12 © Mahindra Satyam 2009 SEI CMMI : What is it? Capability Maturity Model ® Integration (CMMI) is a process improvement approach that provides organizations with the essential elements of effective processes. CMMI helps integrate traditionally separate organizational functions, set process improvement goals and priorities, provide guidance for quality processes, and provide a point of reference for appraising current processes. There are two types of representations in the CMMI models: – Staged – Continuous A representation allows an organization to pursue different improvement paths.

13. 13 © Mahindra Satyam 2009 SEI CMMI : At Mahindra Satyam CMMI journey in Mahindra Satyam started in June 2003 and the first assessment was conducted in December 2003 and last in Feb 2006 The 16 business units of Mahindra Satyam that qualify for the CMMI assessments were assessed to a maturity level 5 through 10 independent assessments Of the 10 assessments, 7 assessments were conducted by Mr. Raghav Nandyal, Lead assessor from Sitara Technologies Ltd, an Indian transition partner company to SEI. The other 3 assessments were conducted by Lead assessors from HCU QPRIME that is one of the business units of Mahindra Satyam. Two of these three assessments were conducted under observation by SEI

14. 14 © Mahindra Satyam 2009 CMMI For Development Ver 1.2 : What is it? CMMI Version 1.2 for Development, is a continuation and update of CMMI version 1.1 and has been facilitated by the concept of CMMI “constellations” wherein a set of core components can be augmented by additional material to provide application-specific models with highly common content. CMMI-DEV is the first of such constellation s and represents the development area of interest.

15. 15 © Mahindra Satyam 2009 CMMI For Development Ver 1.2 : At Mahindra Satyam The projects in Business domains CHB, MAG, TIMES and E&U executed by technology units – ADMS,BI, EA SAP, CES, QEDGE and IES were assessed at Hyderabad / Secunderabad, Bhubaneshwar and Visakhapatnam by KPMG, in November 2008 Mr. K. K. Raman, High Maturity Lead Appraiser from KPMG led the assessment

16. 16 © Mahindra Satyam 2009 AS9100 / EN9100 : What is it? SAE AS9100 is the quality system requirements for suppliers to the aerospace industry issued in August of 2001. It was developed in the United States as AS 9000 in 1997, expanded to address international aerospace requirements and is now approved by aerospace companies in Asia and Europe as well The Standard has approximately 80 additional requirements plus other requirements and 18 amplifications of the ISO 9001:2000 Standard AS9100 defines additional areas within an aerospace quality management system that must be addressed when implementing an ISO 9001:2000-based quality system. Typically, these requirements are included within robust aerospace quality systems. The industry experts who wrote the standard and the representatives who approved it all agree that these additions are essential to ensure product, process and service safety and quality

17. 17 © Mahindra Satyam 2009 AS9100 / EN9100 : At Mahindra Satyam Engineering Solutions business of Mahindra Satyam at Bangalore is certified for AS9100 / EN9100 by BVQI, UK in February 2006

18. 18 © Mahindra Satyam 2009 Automotive SPICE PATHFINDER™ : What is it? Automotive SPICE™ is a common framework for the assessment of suppliers in the Automotive Industry. PATHFINDER™ is an assessment and certification scheme for process capability and organizational maturity. Mahindra Satyam's Automotive Embedded Engineering Practice has achieved the PATHFINDER™ Organizational Maturity Level 5 against the Automotive SPICE™ process assessment model

19. 19 © Mahindra Satyam 2009 Automotive SPICE PATHFINDER™ : At Mahindra Satyam Automotive Embedded Engineering Practices business of Mahindra Satyam at Bangalore is certified for Automotive SPICE PATHFINDER™ Maturity Level 5 by KPMG and Improvona, in April 2008

20. 20 © Mahindra Satyam 2009 Payment Card Industry [PCI-DSS 1.1] : What is it? PCI is a standard for the services related to Credit card domain and is driven through comprehensive control objectives that ensure protection to the cardholder environment (storage, processing and transmission)

21. 21 © Mahindra Satyam 2009 Payment Card Industry [PCI-DSS 1.1] : At Mahindra Satyam Offshore facility for one of the customer engagements of Banking vertical at Hyderabad has been certified to the Payment Card Industry [PCI-DSS 1.1] standard by “ControlCase” in August 2007

22. 22 © Mahindra Satyam 2009 PCMM Level 5 : What is it? The People Capability Maturity Model (P-CMM) is a maturity framework that focuses on continuously improving the management and development of the human assets of an organization The People CMM provides guidance to organizations in selecting immediate improvement actions that help organizations – Characterize the maturity of their workforce practices – Set priorities for immediate action – Integrate workforce development with process improvement – Become an employer of choice Many organizations have discovered that their continued improvement requires significant changes in the way they manage and develop their people

23. 23 © Mahindra Satyam 2009 PCMM Level 5 : At Mahindra Satyam Mahindra Satyam Pune center was assessed at PCMM Level 5 by TUV in April 2005

24. 24 © Mahindra Satyam 2009 OHSAS 18001:1999 : What is it? The OHSAS 18001 certificate specifies the standard for an Occupational Health and Safety (OH&S) management system, to enable an organisation to control its OH&S risks and improve its performance.

25. 25 © Mahindra Satyam 2009 OHSAS 18001:1999 : At Mahindra Satyam Mahindra Satyam, Bangalore was assessed at OHSAS 18001:1999 by Bureau Veritas Certification (India), in June 2007

26. 26 © Mahindra Satyam 2009 BS25999 : What is it? It is the New (and only) Business Continuity Standard from British Standards Institute, UK. BS25999 is a two-part standard: – BS25999 -1 is a code of practice for Business Continuity Management (BCM) – BS25999 -2 is a Specification for a Management scheme. Through Part 2, the management scheme specification, makes it possible for organizations to have their BCM arrangements certified by external auditors and thereby, provide stakeholders, customers and insurers with a real degree of comfort about the rigor with which the BC efforts were developed and managed – Value add of the standard – Standardized documentation – Record Keeping and Documentary evidence – Internal Audit – Management Review – Embedding Culture – Competency of Personnel – Continual Improvement

27. 27 © Mahindra Satyam 2009 BS25999 : At Mahindra Satyam Key Product Delivery Services (KPDS) atIndia locations are all certified to the Standard in November 2008 by BSI UK The customers can leverage on Mahindra Satyam’s Best Practices in planning, executing and monitoring the Business Continuity Operations Robust Processes benchmarked against Professional practices of Business Continuity from Disaster Recovery Institute backed by Mahindra Satyam’s world class infrastructure to counteract interruptions to business activities Periodic internal and third party audits and assessments Business Continuity and Information Security processes are integrated into the Quality management System, thus ensuring consistency and compliance Delivery centers outside India can be considered as alternate site for a country outage scenario Certified Business Continuity Professionals (DRII, USA) to guide and lead the business continuity process

28. © Mahindra Satyam 2009 Thank You