Premium Essay

Cmgt442: Information Systems Risk Management

In:

Submitted By raye3
Words 280
Pages 2
Huffman is attempting to sort out complexities associated with the Benefit Elections systembeing requested. The purpose of the following documentation will address security requirements andrisk associated within the project plan of the Benefits Election System. Complexities, time consumption,and untimely errors can be curtailed with a proper plan, Positive ROI analysis, and maintaining supportof key stakeholders.Foundational ideologies Diem a necessary review of current documentation pertaining toocurrent systems and architecture within Huffman. Understanding is necessary within this review, asstakeholder perspective needs to be maintained throughout the projected project. Unclear system orsecurity requirements will need to be addressed and resolved prior to the analysis phase.The benefit election system needs to be designed and tested from an environmental point of which it will be deployed. Security requirements will need to be addressed within such documentationas:

1. Operational environment specifications
2. Diagrams specifying trust, and risk boundaries. Pertaining dataflow diagrams
3. Resource specifications, with outlined capabilities
4. Comparison of resource specifications to users of resources , being implemented withinthe set requirements.
5. Possible points of security breach by cyber attacker, with possible cyber attacker profile
6. Scenario cases of misuseThe individual with whom the project manager assigns these tasks will need to produce oranalyze these requirements for validity during the development process.

Validly of theserequirements will double-check security content for inconsistent types, invalid assumptions, andtechnical inaccuracies. Special attention should view the cyber attacker profile as manyenterprises and organizations do not become attentive enough to insider risks.Many requirements are not referred through security

Similar Documents

Premium Essay

Cmgt 442 Week 2 Ia

...Risk Analysis Considerations for Huffman Trucking University of Phoenix CMGT442 1-8-2012 The purpose of a risk assessment is to help decision makers to become aware of threats that can negatively impact the business and to help them to make sound and informed decisions to limit the amount of risk the business is exposed to. Huffman trucking is embarking on the creation of a benefits election system for the tracking and reporting of employee benefits. Because of the sensitive nature of the information being dealt with, Huffman must take measures to limit the amount of exposure to risk the system will have. Often times companies overlook some factors of risk because they have limited vision with regards to potential liabilities or faults in their systems. A good and thorough risk assessment can identify previously unseen weaknesses as well as develop a better understanding of all the threats. There are some components that when in place can have a huge effect on the validity of a risk assessment. Hiring an outside firm with expertise in identifying threats and developing action plans can be costly but can also help to ensure any risk analysis is thorough. Also, companies with good data sources are in a better position to evaluate existing operations and assets. When putting together a risk assessment there are certain components that are crucial to getting the process completed thoroughly and appropriately. These steps include: Identifying Threats. Cataloging both internal...

Words: 751 - Pages: 4

Premium Essay

Huffman Trucking Benefits Election System Risks

...Huffman Trucking: Benefits Election System Security Lisa M. Gardner CMGT442: Information Systems Risk Management March 19, 2012 Craig McCormick Huffman Trucking: Benefits Election System Huffman Trucking Company has requested a new Benefits Election System to be implemented within the organization. The current benefit packages include medical, dental, and vision plans for employees. For the Benefit Election System, employee information and the benefit package they choose are stored and managed on a database system. This can either be a hardcopy paper file or an electronic file. Regardless of the storage method, security measures need to be implemented to protect employee’s privacy and information as well as preserve company assets from theft and/or litigation. Huffman Trucking Huffman Trucking has implemented such a system called the Benefits Election System, which assists management in tracking and reporting employee benefits (University of Phoenix, 2005). This paper will examine the security risks and requirements of the Benefits Election System of the organization. Security Requirements Ensuring the security of organizational and employee information is vital for any organization. Security misfortune can be damaging to the organization and the affected employees. In the case of Huffman Trucking information stored in the database includes names...

Words: 1194 - Pages: 5