Privacy and data protection assessment | information technology

 

The Department of Administrative Services (DAS) provides a number of services to other departments in an Australian State Government. These services include HR and personnel management, payroll, contract tendering management, contractor management, and procurement. These services have all been provided from the Department’s own data centres.

As a result of a change in Government policy, DAS is moving to a “Shared Services” approach. This approach will mean that DAS will centralise a number of services for the whole of Government (WofG). The result of this move will be that each Department or Agency that runs one of these services for its own users, will be required to migrate its data to DAS so that it can be consolidated into one of the DAS centralised databases. DAS will then provide these consolidated services to all other Departments and Agencies within the Government.

Another Government policy mandates a “Cloud first” approach to the process of updating or acquiring software or services. Following these strategic policy changes from Government, DAS has decided to:

  • Purchase a HR and personnel management application from a US based company that provides a SaaS solution. 
    • The application will provide DAS with a HR suite that will provide a complete HR suite which will also include performance management. The application provider has advised that the company’s main database is located in a Cloud datacentre based in California in the United States, with a replica database located in a cloud datacentre in Dublin, Ireland. However, all data processing, configuration, maintenance, updates and feature releases are provided from the application provider’s processing centre in Bangalore, India.
    • Employee data will be uploaded from DAS daily at 12:00 AEST. This will be initially transferred to Bangalore in India for processing before being loaded into the main provider database in California.
    • Employees will be able to access their HR and Performance Management information through a link placed on the DAS intranet. Each employee will use their internal agency digital ID to authenticate to the HR and Performance management system. The internal digital ID is generated by each agency’s Active Directory instance and is used for internal authentication and authorisation.
  • Move the DAS payroll to a COTS (Commercial Off The Shelf) application that it will manage in a public cloud;

Tasks 

After your successful engagement to provide a security and privacy risk assessment for the DAS, you have again been engaged to consider some additional questions that DAS management has raised. 

Prepare a presentation for DAS Management using the TRA you recently completed on the security and privacy of employee data. Your presentation is to show:

  1. Discuss how the operational solution using an SaaS application, and the location(s) of the SaaS provider for HR management may affect the security posture of DAS. (20 marks)
  2. Explain if either the operational solution, or the operational location(s), or both, increase or mitigate the threats and risks identified for the security and privacy of employee data? (20 marks)
  3. Discuss the security and privacy implications for DAS of the data processing location? (20 marks)
  4. Discuss any issues of data sensitivity that you think should be considered with either the chosen solution or the storage/processing locations? (20 marks)
  5. Discuss any issues of data sovereignty that should be considered? (20 marks)

Your presentation is to be completed in either PowerPoint or Google slides. Your presentation must not exceed 25 slides of content. 

  • The presentation should be a maximum of 25 slides, including introduction, conclusions and recommendations.
  • Each slide should have speaking notes in the Notes section which expand on the information in the slide.
  • Images and quotations used in slides must be referenced on that slide.
  • The slide deck does require a reference list. References are to be included on a Reference list slide(s), but these are not counted as part of the slide deck limit.

Your presentation should highlight the significant points of your argument, but you should include the detail in the speaking notes section of your slides.

Rationale

back to top

This assessment task will assess the following learning outcome/s:

  • be able to examine the legal, business and privacy requirements for a cloud deployment model.
  • be able to evaluate the risk management requirements for a cloud deployment model.
  • be able to critically analyse the legal, ethical and business concerns for the security and privacy of data to be deployed to the cloud.

Marking criteria and standards

back to topQuestionsHDDICRPSFLQ1. Does the operational solution and locations affect DAS security (20 marks)Comprehensive exploration of the use of SaaS and given locations affect the existing security of data that includes well considered and argued reasoning
Thorough   exploration of the use of SaaS and given locations affect the existing security of data that includes good reasoning
Detailed    exploration of the use of SaaS and given locations affect the existing security of data that includes some good reasoning
Adequate    exploration of the use of SaaS and given locations affect the existing security of data that includes some reasoning
Incomplete or irrelevant    exploration of the use of SaaS and given locations affect the existing security of data that includes little or no reasoning
Q2. Does the operational solution and locations increase or mitigate threats and risks to DAS security (20 marks)Comprehensive discussion of how this solution and its locations will increase or mitigate threats and risks to security of DAS that includes  well considered and argued reasoningThorough   discussion of how this solution and its locations will increase or mitigate threats and risks to security of DAS that includes  good reasoningDetailed    discussion of how this solution and its locations will increase or mitigate threats and risks to security of DAS that includes some good reasoningAdequate    discussion of how this solution and its locations will increase or mitigate threats and risks to security of DAS that includes  some reasoningIncomplete or irrelevant    discussion of how this solution and its locations will increase or mitigate threats and risks to security of DAS that includes little or no reasoningQ3. Implications for DAS of data processing location (20 marks)Comprehensive discussion of the security and privacy implications for DAS of the chosen data processing location that includes  well considered and argued reasoningThorough  discussion of the security and privacy implications for DAS of the chosen data processing location that includes  good reasoningDetailed   discussion of the security and privacy implications for DAS of the chosen data processing location that some good reasoningAdequate  discussion of the security and privacy implications for DAS of the chosen data processing location that includes some reasoningIncomplete or inadequate  discussion of the security and privacy implications for DAS of the chosen data processing location that includes  little or no reasoningQ4. Issues of data sensitivity (20 marks)Comprehensive exploration of data sensitivity issues that includes well thought out reasoningThorough exploration of data sensitivity issues that includes good reasoningDetailed exploration of data sensitivity issues that includes some good reasoningAdequate exploration of data sensitivity issues that includes some reasoningInadequate or incomplete exploration of data sensitivity issues that includes little or no reasoningQ5.  Issues of data sovereignty (20 marks)Comprehensive exploration of data sovereignty issues that includes well thought out reasoningThorough exploration of data  sovereignty issues that includes good reasoningDetailed exploration of data  sovereignty issues that includes some good reasoningAdequate exploration of data  sovereignty issues that includes some reasoningInadequate or incomplete exploration of data  sovereignty issues that includes little or no reasoningReferencing & Presentation
Up to 5 marks can be deducted for incorrect or incomplete referencing Up to 5 marks may be deducted for poor presentation, spelling and grammar

Presentation

back to top

Your presentation is to be completed in either PowerPoint or Google slides. Your presentation must not exceed 30 slides of content. 

  • The presentation should be a maximum of 30 slides, including introduction, conclusions and recommendations.
  • Each slide should have speaking notes in the Notes section which expand on the information in the slide.
  • Images and quotations used in slides must be referenced on that slide.
  • The slide deck does require a reference list. References are to be included on a Reference list slide(s), but these are not counted as part of the slide deck limit.

Your presentation should highlight the significant points of your argument, but you should include the detail in the speaking notes section of your slides.

Semester Papers
Calculate your paper price
Pages (550 words)
Approximate price: -

Why Work with Us

Top Quality and Well-Researched Papers

We always make sure that writers follow all your instructions precisely. You can choose your academic level: high school, college/university or professional, and we will assign a writer who has a respective degree.

Professional and Experienced Academic Writers

We have a team of professional writers with experience in academic and business writing. Many are native speakers and able to perform any task for which you need help.

Free Unlimited Revisions

If you think we missed something, send your order for a free revision. You have 10 days to submit the order for review after you have received the final document. You can do this yourself after logging into your personal account or by contacting our support.

Prompt Delivery and 100% Money-Back-Guarantee

All papers are always delivered on time. In case we need more time to master your paper, we may contact you regarding the deadline extension. In case you cannot provide us with more time, a 100% refund is guaranteed.

Original & Confidential

We use several writing tools checks to ensure that all documents you receive are free from plagiarism. Our editors carefully review all quotations in the text. We also promise maximum confidentiality in all of our services.

24/7 Customer Support

Our support agents are available 24 hours a day 7 days a week and committed to providing you with the best customer experience. Get in touch whenever you need any assistance.

Try it now!

Calculate the price of your order

Total price:
$0.00

How it works?

Follow these simple steps to get your paper done

Place your order

Fill in the order form and provide all details of your assignment.

Proceed with the payment

Choose the payment system that suits you most.

Receive the final file

Once your paper is ready, we will email it to you.

Our Services

No need to work on your paper at night. Sleep tight, we will cover your back. We offer all kinds of writing services.

Essays

Essay Writing Service

No matter what kind of academic paper you need and how urgent you need it, you are welcome to choose your academic level and the type of your paper at an affordable price. We take care of all your paper needs and give a 24/7 customer care support system.

Admissions

Admission Essays & Business Writing Help

An admission essay is an essay or other written statement by a candidate, often a potential student enrolling in a college, university, or graduate school. You can be rest assurred that through our service we will write the best admission essay for you.

Reviews

Editing Support

Our academic writers and editors make the necessary changes to your paper so that it is polished. We also format your document by correctly quoting the sources and creating reference lists in the formats APA, Harvard, MLA, Chicago / Turabian.

Reviews

Revision Support

If you think your paper could be improved, you can request a review. In this case, your paper will be checked by the writer or assigned to an editor. You can use this option as many times as you see fit. This is free because we want you to be completely satisfied with the service offered.

error: Content is protected !!