Assumptions

• A list of all integrations in and out of Workday and their transmission method and the data elements is available

Tasks

• perform security review on 
  • data transmission : 
    • batch and transactional
    • mode of transmission; Workday can transfer with SFTP, FTP with PGP, FTP with SSL,
    • data elements
  • Business practices:
    • data handling: will want to know how Workday Inc manages the their employees, CU data, business continuity, etc...
    • workday to other vendors: will be included in the review but since they are already vendors we do business with it will be a small part;

Open Questions:

• How are keys escrowed?