PoC 3.13: EDP Systems Branch (IT Asset Management & Cybersecurity)

Functional Objective: Covers IT Asset Management (ITAM lifecycle: deployment, maintenance, disposal), software license management, server/hardware uptime monitoring, network security, user access provisioning, IT policies, and digital transformation landscape.

🎥 PoC Video Demonstration

IT Asset Lifecycle, RBAC Provisioning & Security Governance

Demonstrates ITAM hardware/software tracking, role-based user provisioning, DPDP Act PII masking, immutable audit trails, and document immutability enforcement.

📋 Core Functional Capabilities

IT Asset Management (ITAM): Full lifecycle tracking of hardware (servers, desktops, networking equipment, UPS, printers) and software licenses across CSD HO, 5 RM Offices, 34 Area Depots, and 4,500+ URC edge nodes.
User Access Provisioning & RBAC: Role-based access control with scope isolation (URC Operator cannot view Depot inventory ledger; Depot Storekeeper cannot release payment vouchers). Defence-grade user provisioning and de-provisioning workflows.
DPDP Act 2023/2025 Compliance: PII masking for defence service numbers, Aadhaar, PAN, and contact numbers (XXXX-XXXX-1234) for non-authorized roles. Data retention and erasure policies.
Cybersecurity & Audit Governance: Tamper-evident immutable audit trails logging previous value, new value, user ID, IP address, and timestamp. Document immutability enforcement (docstatus=1 lock). —

🏗️ Technical Architecture & DocType Mapping

In Business M and Framework M, this domain is powered by native, metadata-driven DocTypes, async controllers, and distributed ledger adapters:

Active Business M DocTypes

Asset, AssetCategory, AssetMovement, Employee, ManagementApproval

graph LR
    User["Stakeholder Portal / Desk"] --> Gateway["API Gateway"]
    Gateway --> Controller["Domain Controller & RBAC"]
    Controller --> DB[("PostgreSQL / RLS Master")]
    Controller --> Relay["Outbox Relay Worker"]
    Relay --> TB[("TigerBeetle Immutable Ledger")]

🧪 Verifiable Test Script (Human Review Flow)

Follow these steps in the running Business M instance to replicate the live PoC demonstration:

Access Domain Desk: Log into the web desk at the designated endpoint for this role.
Execute Transaction Flow: Follow the standard maker-checker workflow to create and submit the source document.
Verify Audit Trail & Ledger: Inspect the generated transfer ID, status transitions, and read-model balances.
Inspect Air-Gapped Sync (if applicable): Ensure zero cloud secrets on disk and verify cryptographic signing.