Huffman Trucking was founded by K Huffman of Cleveland, Ohio in 1936. The company growth was a result of the increased demand for carrier services between factories in the midwest to ports on the East Coast during World War II. Today Huffman Trucking is growing from internal sales and the acquisition of five Eastern regional carriers, which has enabled
Huffman Trucking to continue to be privately held. Huffman trucking employees 1,400 workers in its logistical hubs located in Los Angeles, California, Ohio, St. Louis, Missouri, Bayonne and
New Jersey. Kenneth Colbert the Director Human Resources has contacted the Vice President of
Industrial Relations, Graham Grove concerning recent decisions regarding an alternate health care benefit program. According to the memo the plan will be a flex plan for union and nonunion employees with health and dental insurance options. Mr. Colbert and Mr. Graham have hired S.
Caldwell IT Consulting Firm to develop and install a benefit election system to support the tracking and reporting of Huffman Trucking employees. The consultant team will describe the consideration needed to address possible security requirements and describe possible risks associated with the requested benefits election system.

The Consulting Team S Caldwell IT Consultants believe their role is to act as an adjunct for Huffman Trucking
Human resource department, bringing benefits, knowledge, experience and skills. The team will
Perform all of plan management functions needed to ensure an effective and efficient delivery of health and dental benefits election to the employees while focusing on long term financial viability. Security Requirements Employers today have moved away from the old ways of enrolling and administering benefits with paper. Huffman Trucking is ready to use a paperless enrollment and administration software that has open enrollment capabilities. The old traditional method required employees to complete the benefit election forms on paper and then the papers would be signed, copied and given to the HR Administrator. The new software technology implemented by the consulting team has made the elections process paperless. However, employees often question the security regarding online benefit elections. The team has addressed the security concerns by taking proactive methods, to identify system vulnerabilities by employing system testing. The test method include security test and evaluation and automated vulnerability scanning tool
(NIST, 2001 para. 12). The security test and evaluation method can be used in identifying system vulnerabilities during the risk assessment process (NIST, 2001 para. 14). The automated vulnerability scanning tool has the ability to scan a group of hosts for known vulnerable services
(NIST, 2001. para. 15). The next step of the risk assessment is to determine the security requirements specified for the system. The consulting team will present the HR Administrator and the Vice President with the system security requirements in a table form, with an explanation of how the benefit election system does or does not satisfy each security requirement (NIST, 2001. para.18). The basic security standards will be presented in a security requirements checklist which will evaluate and identify vulnerabilities of the assets such as hardware, software, personnel and information (NIST, 2001. para. 22).

• Managemen• Operational• Technical.

Technology plays a major role

. We’ll perform all the necessary plan management functions needed to ensure a smooth and efficient delivery of benefits programs to participants while keeping an eye on long-term financial viability.

Account Management Services uses a dynamic process that includes:
Setting objectives based upon your organization’s corporate philosophy and long term strategic plans
Designing employee benefit plans that are competitive within your industry
Evaluating insurance vendors, determining appropriate carriers, preparing requests for proposals, and negotiating renewals
Implementing programs, providing employee communication materials, and providing continuing administrative and compliance support
Analyzing claim data and providing monthly financial reports

Comprehensive Service Packages include a variety of day-to-day plan management and strategic planning initiatives:
Providing customized benefit manuals and financial reports
Assisting with federal and state regulation compliance
Preparing 5500 forms
Assisting with claims issues
Completing employee benefit surveys
Conducting educational seminars
Additional services such as customized communications materials, end of year benefit statements, plan summaries and other educational material