[2019] COMPSCI5077 Enterprise Cyber Security (M) - Question 1 Legacy System Protection

1. Brooks Industries is a large enterprise and has several legacy systems that effectively manage employee records. These legacy systems are maintained by a group of technical staff that are nearing retirement. These systems are used by a number of employees for many different tasks. The technical team have evolved some aspects of these systems, but much of the associated documentation has been lost and relevant staff have already retired. The systems contain personal data relating to employees, including bank details and medical information. CourseNana.COM

The management team are concerned about potential security and data protection issues given the age and importance of the legacy systems. CourseNana.COM

The management team are considering evolving the legacy systems to address potential security and data protection issues. CourseNana.COM

Devise a plan with FOUR clear steps to evolve the legacy systems in the given context. CourseNana.COM

[8] CourseNana.COM

The management team has been considering the options for evolving the legacy systems. There are some members of the management team that are arguing for development of replacement systems deployed using Infrastructure as a Service (IaaS). There are other members of the management team that favour utilising an established and specialised Managed Service Provider (MSP). There are members of the management team that are aware of other organisations using an MSP that specialises in employee record management and also employs many university graduates. CourseNana.COM

Argue for the optimal deployment by comparing and contrasting both options in the given context. CourseNana.COM

[8] CourseNana.COM

Brookes Industries is headquartered in the European Union with offices across Europe. The company has opened its first office in the United States of Ruritania. The company plans on transferring some employee personal data out of the European Union to systems in the United States of Ruritania. CourseNana.COM

The management team are concerned about the potential legal issues in transferring data outside the European Union to the United States of Ruritania. The technical team state there is no concern as they have determined that United States of Ruritania has adequate levels of data protection comparable to the European Union. CourseNana.COM

Argue the accuracy of the assessment by the technical team in the given context. CourseNana.COM

[4] CourseNana.COM

  CourseNana.COM