2
Improving Zolontech's capacity to track, classify, and handle vulnerabilities throughout
its distributed computing environments is the goal of the Security Vulnerability Management
System. For tracking and reporting critical, high, and low-severity vulnerabilities for every piece
of software used by the company, this system will come with a dashboard and an extensive
database.
Functional Business Requirements
Finding and Classifying Vulnerabilities
- Use integrated security technologies to automatically identify vulnerabilities across
many software platforms.
- Sort vulnerabilities that have been found into three categories: Critical, High, and Low,
according to their effect and seriousness.
- Notify the proper team members in real time of any major vulnerabilities.
Features of the dashboard and reporting
- Show a dashboard that is easy to use and lets users filter vulnerabilities based on status,
severity, and software kind.
- Create automatic reports that show the general state of vulnerabilities and their trends
over time.
- Provide export choices so that stakeholders may receive reports in CSV and PDF
formats.
Control of User Access
- Enable authorized people to see and update vulnerability information by implementing
role-based access controls.
- Monitor user behavior in the system to guarantee responsibility and compliance.
3
Automated Maintenance and Updates:
- To protect vulnerability data, automate regular database backups.
- To maintain system performance, schedule routine updates for dashboard elements and
security tools.
Connecting to Current Systems
- Pull relevant information into the vulnerability database by integrating with current
monitoring technologies in an effortless way.
- Provide APIs so that the system may interact with other programs that the security team
uses.
- Verify compatibility with the hardware and software infrastructure currently in place at
the company.
Monitoring Incident Management and Resolution
- Provide an incident tracking module so that team members may record and oversee
corrective measures for vulnerabilities that have been found.
- Update the dashboard with the status of each vulnerability's resolution.
- Permit users to designate particular collaborators to address vulnerabilities.
Analytics and Data Visualization
- Offer extensive visualization tools to highlight patterns, risk levels, and repair
timetables.
- Allow the creation of unique charts that highlight key performance indicators (KPIs)
related to vulnerability management.
- Using previous vulnerability data, apply statistical analysis to find possible security
threats.
4
Nonfunctional Business Requirements
Response time and system performance
- Make sure that, for typical searches, the dashboard loads and shows data in a matter of
seconds.
- Allow up to 500 people to view or filter vulnerability data at once without experiencing
any noticeable latency.
Compliance and Data Security
- All sensitive data should be encrypted both in the database and during transmission.
- Observe cybersecurity-related regulations, such as ISO 27001 or NIST guidelines.
Dependability and Availability
- To guarantee the security team's continuous availability, maintain a 99.9% system
uptime.
- To reduce interruptions, plan maintenance windows at off-peak times.
Scalability
- As new software systems are introduced, build the database and dashboard to handle
increasing data volumes.
- Make plans for improvements to the system that will eventually provide more
processing and data storage capacity.
Usability of User Interfaces
- Make sure the dashboard's navigational components and labels are clear and easy to
understand.
5
- Include accessibility features like keyboard shortcuts and screen reader compatibility.
- Permit users to alter the dashboard display to suit their jobs and preferences.
Backup and Disaster Recovery
- Create a disaster recovery plan@so that, in the event of a system failure, data may be
promptly restored.
- To guarantee data integrity and avoid data loss, schedule automatic data backups.
- To improve resilience, keep many backup copies in various safe places.
System Training and Documentation
- To instruct personnel on system usage and best practices, provide thorough user
manuals.
- To keep team members informed about new features and updates, hold periodic training
sessions.
- Provide technical assistance to efficiently handle user questions and technical problems.
Financial Analysis
The projected equipment and systems solution costs for the Capstone Project include a
number of elements that are necessary to put in place a strong and secure infrastructure. The
main hardware expenses are network equipment (estimated at $2,000) and servers (budgeted at
$3,000. $1,000 is allotted for workstations to assist operations and development. Security
Monitoring Software adds an additional $2,000 to guarantee cybersecurity security measures are
in place, and the Document Management System (DMS) License costs $2,000 as well.
Dashboard Tools ($1,000), which will help with organizing and displaying important data, and
an Integrated Development Environment (IDE) ($1,500) to expedite coding activities further
improve the project's operational efficiency. It is estimated that testing tools will cost $5,000 to
6
ensure system integrity and debugging tools will cost $1,000 to fix software problems. $2,000 is
spent on training to ensure team members are proficient with new tools and technologies, and
$3,000 is set aside for other expenses for dealing with unplanned requirements. The recalculated
Net Present Value (NPV) for the Capstone Project is around $35,719.07 when a 5% discount rate
is used. This suggests that the project is a wise financial choice because the projected future cash
inflows for the project far outweigh the original outlay. The positive net present value (NPV)
indicates that the project's advantages are even more beneficial when the discount rate is lowered
to 5%. Over the project's anticipated longevity, this increase in NPV strengthens its financial
appeal.
References
Satzinger, J. W., Jackson, R. B., & Burd, S. D. (2015).@Systems Analysis and Design in a
Changing World@(7th ed., pp. 46-50). Cengage Learning.
https://search.ebscohost.com/login.aspx?
direct=true&scope=site&db=nlebk&db=nlabk&AN=2281856
Powered by TCPDF (www.tcpdf.org)
