Corporate Digitalization and Transformation Guide

2. Enterprise IT Inventory Management and GLPI Solution Approach

For organizations to effectively manage their digital infrastructure and ensure sustainable IT management, having a dynamic and up-to-date inventory structure is essential. Inventory tracking processes carried out using manual methods (Excel, email, etc.) lead to data outdatedness, human errors, and high operational burden.

In line with this need, we at Dekode Cyber ​​Informatics are positioning the GLPI platform, an open-source and comprehensive inventory and ITSM solution.

A. Fundamental Standards in Effective Inventory Management

For a healthy inventory tracking system, the following data sets must be maintained:

• Unique Identity Management: Serial numbers or barcode/ID structures.
• Ownership and Assignment History: The device's current owner, location information, and past assignment transactions.
• Categorization and Details: Asset categories, subcategories, and technical parameters.
• History and Change Tracks: Creation, update, and operation logs.

B. Key Features of the GLPI Platform

• Automatic Discovery (Agent Infrastructure): Hardware and software information of computers, servers, and network devices is automatically collected through agents or API integrations installed on systems.
• Sözleşme ve Lisans Takip Yönetimi: Purchasing processes, warranty periods, and software licenses are tracked through the system; automatic notifications (email) are provided for contracts nearing their expiration date.
• LDAP / Active Directory Integration: It integrates with enterprise directory services, eliminating the need for additional user management overhead.
• ITIL Compliant Call and Service Catalog (Helpdesk): It offers an integrated support desk where users can submit fault/request reports and where department-specific forms (IT, HR, Administrative Affairs, etc.) can be defined.
• Knowledge Base (Frequently Asked Questions): It reduces the workload of IT teams by providing a documentation structure that allows users to find solutions to frequently encountered problems on their own.

C. Corporate Benefits and Cost Advantages

• Time and Labor Savings: Eliminates the need for manual inventory collection, allowing resources to be directed to strategic projects.
• Budget and License Optimization: Optimizes budget management by identifying idle licenses and allocating the correct assets.
• High Integration Capability: It can communicate seamlessly with existing ERP, CRM, or other enterprise call management systems via API.

To manage your IT assets on a centralized, up-to-date, and secure platform and to learn about GLPI implementation/consulting processes, you can contact Dekode Cyber ​​Informatics.

3. Corporate Identity and User Management Approach

In digitalized corporate structures, the foundation of information security and access control rests on a well-designed User Management (Identity & Access Management – ​​IAM) infrastructure. User accounts are the fundamental key to secure access to corporate systems, consisting of authentication, authorization, and account management.

A. International Standards and Legal Compliance

Organizations should base their user management processes on international information security frameworks and regulations.

• ISO/IEC 27001: Requires the definition of clear policies for account creation, authorization, closure, periodic review, and the management of privileged (admin) accounts.
• Cyber ​​Hygiene Standards (based on NIST SP 800-53): These standards require complex password structures (at least 8 characters, including uppercase/lowercase letters, numbers, and special characters), to be changed every 90 days, and the use of Multi-Factor Authentication (MFA) on critical systems.
• Presidential Digital Transformation Office Guide: It mandates a single account (preventing shared account usage), the principle of least privilege, account lockout mechanisms, lifecycle tracking, and monitoring of unauthorized access changes (Linux ETC shadow etc.).

B. Infrastructure and Positioning Options

The appropriate architecture is determined based on the organization's scale, operating system preferences, and operating model (on-premises/cloud):

• Cloud-Based Identity Management: Integrations with Google Workspace or Microsoft Entra ID (formerly Azure AD) suitable for flexible and remote working models.
• On-Premise Identity Management: A Microsoft Active Directory solution that works fully integrated with the Windows Pro ecosystem and file/domain services on the organization's internal servers.

C. Best Practices for Safety

• Principle of Least Privilege: Users should only be granted access rights required by their job descriptions; privilege increases should be subject to multi-stage approval processes.
• Privileged Account Management (PAM): Database and server administrator privileges should be separated and routinely monitored.
• Central Identity and Single Sign-On (SSO): Users should be able to access applications such as ERP, Helpdesk, and Project Management with a single secure identity without password repetition.
• Multi-Factor Authentication (MFA): Additional layers of verification such as SMS and Google Authenticator should be implemented to protect against password theft.

D. User Management Violations and Risk Prevention

Güvenlik ihlallerinin yaklaşık %84’ü çalınan kimlik bilgilerinden kaynaklanmaktadır. Aksi durumların önüne geçmek için:

• Weak and easily guessable passwords should be prevented.
• The offboarding processes for departing employees must be fully implemented, and any forgotten or inactive accounts must be closed.
• To prevent unauthorized software installation and data leaks on computers, excessive authorization (granting administrator rights) should be avoided.

For the development of identity management policies specific to your organization, Active Directory/Cloud architectures, and user authorization processes, you can contact Dekode Cyber ​​Informatics for expertise.

4. Enterprise Project Management and Digital Tool Architecture

In today's dynamic business environment, Project Management is the systematic application of knowledge, skills, and tools to achieve targeted outputs (products, software, infrastructure, etc.) within a specific time, budget, and resource constraint. Successful project delivery requires synchronized work not only from technical teams but also from interdisciplinary units such as Human Resources, Accounting, and Procurement.

A. Expectations from Corporate Project Management

When organizations are positioning their digital project management tools, their basic expectations can be grouped under two main headings:

• Business Management and Operational Collaboration: Task tracking, team synchronization, prioritization, and preventing communication breakdowns.
• Enterprise Portfolio Management (PPM): Annual budgeting targets, actual cost tracking, human resource utilization, and monitoring of strategic goals.

B. Project Management Tools and Category Comparison

C. An Enterprise Alternative: The Open Project Solution

For organizations that want to optimize costs, keep their data in-house (on-premise), or establish a GDPR-compliant project infrastructure, Open Project offers a powerful alternative.

Key Technical and Operational Features:

• Versatile View & Planning: Support for Work Packages, Gantt Charts, Kanban Boards, and Work Breakdown Structure (WBS).
• Flexible Project Methodologies: It offers Milestone and Summary Task management for traditional (Waterfall) projects; while supporting Bug, Epic, User Story, and Sprint (version) tracking for Software/Scram projects.
• Directory and Security Integrations: Access management with corporate identities thanks to Active Directory / LDAP integration.
• Information Management: Integrated Wiki, Meeting Notes, and News Feeds.
• Installation and Configuration: Docker can be installed securely and quickly on a container architecture and Ubuntu infrastructure.

D. Evaluation and Transformation Roadmap

Before making high-budget software investments, starting with open-source solutions like Open Project to accurately define the organization's needs provides a productive stepping stone for analyzing employee adoption and integration requirements.

For analysis of your project management processes, Open Project installation/integration, and project management training tailored to your organization, you can contact the expert team at Dekode Cyber ​​Informatics.

5. Corporate Document Management Systems (DMS) and Digital Transformation Strategy

Günümüz iş dünyasında kurumsal verinin güvenli, erişilebilir ve sürdürülebilir bir yapıda yönetilmesi, dijital dönüşümün (dijitalleşme oranı %85 seviyelerindedir) en kritik adımlarından biridir. Doküman Yönetim Sistemleri (DMS – Document Management System); dağınık fiziki ve dijital arşivleri merkezi bir platformda toplamak, arama kolaylığı sağlamak, iş akışlarını otomatikleştirmek ve veri güvenliğini üst seviyeye çıkarmak amacıyla konumlandırılır.

A. Corporate Benefits of Document Management Systems

• Cost and Resource Optimization: Eliminates paper waste and physical archiving costs. Minimizes time losses in document search processes (an average of 2 hours/day per employee).
• Version and Access Control: Prevents confusion regarding documents with wet signatures or outdated documents. Role-based authorization (Principle of Least Privilege) defines document-based editing, viewing, and deleting rights.
• Data Security and Business Continuity: Data stored in the shared area using encrypted and secure protocols (TLS/HTTPS) is protected against hardware failures and data loss.
• Legislation and Legal Compliance: Ensures full legal compliance with KVKK (Personal Data Protection Law), ISO 27001, e-Signature, and KEP (Registered Electronic Mail) integrations.

B. Use Cases and Types of Needs

• File Sharing and Collaboration: Secure file sharing and simultaneous document editing via internet, mobile (Android/iOS), and desktop access.
• Electronic Document Management System (EDMS) & KEP (Registered Electronic Mail): Managing official institutional correspondence, incoming/outgoing document flow, and KEP integrations.
• Quality Management Systems (QMS): Publication and monitoring of policies, procedures, instructions, and CAPA (Corrective and Preventive Action) processes through approval mechanisms.
• OCR and AI-Powered Search: Scanned physical documents are converted into text (OCR), tagged, metadata is created, and they are made suitable for artificial intelligence (AI) searches.

C. Featured DMS Platforms and Product Categories

D. Implementation and Deployment Roadmap

1. Analysis and Needs Assessment: Determining the number of users, the need for concurrent access, and projections for data growth.
2. System and Communication Integrations: Planning data flows with ERP, e-signature, or accounting software.
3. Template and Data Migration: Uploading corporate templates to the system and transferring the existing archive according to the authorization matrix.
4. Training and Cultural Adaptation: Disseminating the system into the organizational culture through user and administrator training.

For the selection of the most suitable Document Management System for your organization, SharePoint, Nextcloud, ProQ installations and e-Signature integration processes, you can contact the expert team of Dekode Cyber ​​Informatics.