[2020] COMPSCI5077 Enterprise Cyber Security (M) - Question 1 Cloud Deployment Models
1. Bartik and Spence have created a successful financial start-up in Lilliput, a country not part of the European Union (EU) or the European Economic Area (EEA). The pair have decided to create a branch of the financial start-up company in France, a country that is part of the European Union (EU). The pair are encountering fierce competition, in both France and Lilliput, from various similar financial start-up companies.
Bartik and Spence are keen to ensure they demonstrate a professional, high-quality service that customers will recommend to friends and family. The pair want to use cloud computing to ensure their company can scale, but have limited technical knowledge and experience. Bartik also highlights that both governments have strict financial regulations, that while loosening, are likely to change as the countries are in the process of negotiating a wide-spread trade agreement.
a.
b.
The pair have decided to use cloud computing, but the pair are unsure of the optimal cloud deployment model.
Critique FOUR different cloud deployment models in the given context. Argue for the optimal solution in the given context.
(approximately 400 words)
[8]
Spence is concerned about the confidentiality of customer data, specifically personal data leaking from use of cloud computing infrastructure or as the result of a cyber-attack. Spence is also concerned that once data is compromised, unauthorised individuals could infer insight from data, potentially giving an advantage to competitors. Spence initially considered encryption to further protect customer data, but felt it was not realistic or optimal. Bartik agrees, but argues they must still ensure they can efficiently utilise customer data pertaining to profiling repayment habits and transaction history for individual customers. A customer record contains various items of information, such as annual salary and gender, as well as sensitive information, including racial origin and religious beliefs.
Argue for TWO obfuscation-based inference controls that would be optimal in the given context.
(approximately 200 words)
[4]
Spence states that they could offer existing French customers better financial products and interest rates, if the pair stored and processed all data at their Lilliput branch. Spence argues all that would be required is to transfer and store all existing customer data at the Lilliput branch. Bartik argues that since Lilliput is not part of the European Union (EU), no such data transfer can occur. Spence argues this is not a problem as the company’s customer data is transited all over the world, effectively passing through various non-EU networks to their back- up systems in various other EU countries.
Appraise different options for the restricted transfer of customer data in the given context and argue whether the different positions adopted by Bartik and Spence are accurate.
(approximately 400 words)
[8]
Get the Solution to This Question
WeChat (微信)
WhatsApp
