Client Identifying Data (CID)

Overview

This section is only relevant for customers in the banking sector. To ensure FINMA compliancy regarding CID, the customer must notify Swisscom which VM or DBMS to secure. If in doubt, please contact your Customer Service Manager at Swisscom.

CID Activation

In order to store CID on an ESC Tenant, the customer must notify Swisscom as such. This has to be done during Tenant Onboarding or at a later time via Service Request. In this case Swisscom will activate further CID-specific options for the tenant in the portal, which will then be available for selection when purchasing Managed Cloud Services.

When purchasing Managed Cloud Services, the customer must inform Swisscom on which VMs or DBMS CIDs are stored. This can be done as described below:

For Customer Managed Tenant

In the Swisscom Portal you need to select the option Set CID Status (Day 2 Action) for every VM or DBMS that stores CID. After selecting this option to Yes, Swisscom will activate the additional protection and monitoring measures to trace activities. It will alarm Swisscom's Operations Center in case of violations.

Important: This Day 2 Action needs to be activated for each Managed OS and Managed DBMS instance that stores CID.

Remember: The alarming is paused when a VM is in Temp Admin mode.

For Swisscom Provider Managed Tenant

If the operational responsibility of the tenant is assumed by Swisscom and the customer is not able to administer VMs in the ESC Service Portal himself, the customer needs to start a Service Request to inform Swisscom on which VMs or DMBS CID will be stored.

Important: As long as the customer has not explicitly informed Swisscom that CID data will be processed on a corresponding VM or DMBS, Swisscom will set the status for these instances to "NO" and will not activate any additional protection and monitoring measures on these instances.

Report

Prerequisite: User has to be granted the Compliance Manager Role.

In the Swisscom Portal under Reports you can find information on the CID status per VM or DMBS. If you do not have access to the Portal while using Swisscom Provider Managed Tenant, you can request the report via Service Request.