CIS498 Final Project
project_deliverable_1.docx
Running head: PROJECT DELIVERABLE 1: PROJECT PLAN INCEPTION
PROJECT DELIVERABLE 1: PROJECT PLAN INCEPTION
Project deliverable 1: Project Plan Inception
Student’s Name:
Instructor’s Name:
University:
Date of Submission:
Background information on the company
The company is an innovative e-commerce startup company funded by a venture capital group. The company was set to address the technological deficit that is created by people absorbing technology in their day to day activities without the needed support. As such, the company’s main goal is to offer computerized systems to other companies or to individuals. In a nutshell, the company will be a contemporary system vendor and will strive to solve any software related problem from its clients (Nasir, 2013). Since the company recognizes on the advancements in technology and the move from traditional forms of doing business, most of its systems will be bought online. Support services will also be carried out remotely hence physical contact with clients will be made as a last resort and if it is really important to do so.
Type of business
The company’s primary type of business is providing an online platform in which other companies, vendors and customers can order and access computerized systems. The company will also offer remote system administration support to its various clients. In essence, the company strives to fill the gap left by people adopting technological advancements without the needed support from experts.
The information system that the company will have to support the business
The company will come up with an online platform through which it will interact with users, potential customers and its existing customers. The platform will take the form of an online shop such as Alibaba but will not be involved in normal retail business but rather on system vendor business. The homepage of the portal will take the form of interactive websites from which users can log in so s to contact the company. current available systems will be on display and potential customers will choose on what fits their desire. In as scenario whereby a system doesn’t offer all what the client needs, the client will contact the company for customization of the product. As such, the company will have strong servers to facilitate these interactions and transactions (Mazoor, 2010). It will also have high capacity databases which will store the systems to be offered to clients as well as any other system that will be developed by the company. care will be taken to make sure that the services offered by the company cannot be intercepted by third parties hence strong security will be implemented in all the company’s operations. Due to the aspect of the company delivering remote system administration support, it is imperative to have a strong computer networking capabilities. As such, the company will have routers which will be able to connect to remotely situated routers so as to access other networks in which the company needs to offer support to (Mazoor, 2010). In essence the company is a technology support company that will ensure that clients can interact with technology efficiently. The targeted customer market are people and companies that have encapsulated information technology in their operations and who are in need of some third-party support. The services will be done online unless there is a very good reason why the company should send one of its employees to the customer’s premises.
References
Nasir S. (2013). Modern Entrepreneurship and E-Business Innovations. Istanbul University
Amir Mazoor (2010). E-Commerce: An Introduction. Lambert Publishers
project_deliverable_2.docx
Running Head: BUSINESS REQUIREMENTS –DELIVERABLE 2
13
BUSINESS REQUIREMENTS –DELIVERABLE 2
Business Requirements –Deliverable 2 Student Name Course Title Professor Institution Affiliation Date
Introduction
Business requirements are essential in developing the functional and non-functional system requirements because they provide a guideline of the operations to be automated through the system. Companies also need to perform a business requirements analysis to identify the feasibility of the project in terms of economic feasibility and organizational feasibility (Alexandrova, 2012). In this project, the company operates in ecommerce field where there is need to diversify the operations through implementation of information systems, database systems and a network infrastructure. The organizational goals is to maintain the costs low and increase the revenue implying that the project will reuse the current systems and upgrade them before procurement of additional components. The project will cover specific items described in the scope and scope control and address some risks that the project might face.
Business requirements constitutes of elements like risks and risk management plan, scope and scope control, project assumptions and constraints (Alexandrova, 2012). In general, the project will cover the two stories of the new building by installing and configuring a computer network, information system and expand the databases into a data warehouse. The success of the project will be measured by the customer success because the ecommerce business is usually customer oriented. Therefore, the customer requirements will play a major role in establishing business requirements.
Scope of the Project
This scope provides a description of elements that the project will address to meet the objectives of the company. This project involves several areas that the project team should accomplish to meet the business needs of the company. The following are the scope of the project based on different components of the solution:
Applications: the organization requires implementation of several applications to help manage the customers and business operations. The major applications that the ecommerce company requires include data reporting applications, data integration applications, web application or ecommerce website and data analytics applications. Additionally, the company needs to integrate external applications with the current operations. Applications such as Enterprise Resource Planning (ERP) and Customer Relation Management or CRM application are of significant importance to the company. Examples of specific application in the mentioned category include mart application, Online Transaction Processing (OLTP), Online Analytical Processing or OLAP and predictive analysis application. The application will enhance online payments because some of the customers of the company are remotely located while others need faster means of payment without compromising security of information (Kemper & Neumann, 2011).
Sites: The main site that the project will address is the three-story building that is acquired as the new premises of the company. The three stories will be installed with a Local Area Network, information systems and be connected to the data warehouse. All the business offices, operation offices and the business areas will also be part of the project sites. In addition, the project will address the challenges of remote employees through implementation of web services rather than installation of IT architecture in those remote sites.
Process re-engineering: the entire information system, It architecture and available databases need redesigning and reassigning of components to meet the growing demands of the company. The systems will be redesigned so that the new and better workflows of the company can be able to integrate the new data warehouse, computer network and information system. In addition, only the identified applications will undergo redesigning because they handle critical information.
Customization: the company needs completely new and customized architecture and information systems because of the scalability and need to support future growth of customers and operations. The database warehouse require customization of the existing relational databases by involving a star schema for dimensional modelling and implement outriggers for the data warehouse. Other components including the information systems and hardware components needs customization to integrate external applications and systems.
Interfaces: the scope will also address the interfacing needs of the company. Since the project involves a solution to help the company tap into an international market, there is need to implement user-friendly interfaces for both the customer applications and business applications. The interfaces will be developed with consideration of user-interface best practices and different categories of users (Lee, Eastman, Taunk, & Ho, 2010).
Architecture: both the technical architecture and applications architecture are components that are in the scope of the project. The application architecture will ensure the project team integrates aspects of database management, network access and control, database connectivity and middleware. This architecture will outline various components of the networks and allow specific functions within each network section. Technical architecture will ensure that the logical and physical networks of the Local Area Network are implemented properly and support the needs of users. The project will also ensure that there is proper positioning to allow future growth and expansion of the network as well as security control integration.
Conversion: since the company handles large volumes of different types of data in a daily basis, the project will ensure it implements different types of conversion for the data assets. The conversion will involve splitting the data sets into business data, historic data and operations data. The conversion of these data will then be performed separately according to the needs of each data set. The schema development will ensure that the three data sets or categories are considered.
Testing: the project will also provide testing of different components of the system that will be installed. A comprehensive testing procedure will be deployed by developing a testing plan to ensure that the systems meet the project objectives and company objectives. The testing process will require the project team to identify the system errors, bugs and failures and fix them accordingly to allow proper functioning of the system. The types of testing that are in-scope are integration testing, system testing and unit testing. One other type will be involved in need arises.
Funding; funding for the project is a major concern for the project because the project requires some scope items to be covered by using some money. The project owner (the company) will be the primary source of finances for the project. The company will be the sponsor of the project where the management will liaise with the commercial banks and venture capital to fund for the project. Each department will also contribute for their additional requirement that are not in the project scope. Teleworkers will also contribute towards the project in case they require a local area network within their premises of work.
Education: the project will also need to provide information to the users about new subsystems, policies and even functionalities. Apart from the user training, there will be an option for self-support services that each system will have. The project team will develop a quick “help” section for each system interface to educate the users on system usage. The web application will also contain system awareness and education as part of the marketing plan for the company through online platforms. Each application will also contain a list of Frequently Asked Questions or FAQ with their answers to help the users of the systems understand some basic concepts.
Scope Control
All elements described in the scope will constitute the in-scope elements while the rest will be out of scope. The project scope will be controlled by analyzing if an element is in scope or out of scope (Khan, 2006). For instance, in the sites, the regions that handles the business data and other types of data related to the organization in a daily basis will be considered to be in scope hence their implementation according to the scope.
The scope will also have its control through the available human resources. Each individuals of the project team will be allocates specific component according to the project scope. These individuals will perform their activities in relation to the scope and meet the project objectives. Additional activities will be considered out of scope.
The data that is directly associates with the company’s business operations will have to be considered in all circumstances. Handling other data like the employee’s personal data should be restricted because it does not constitute business data. Similarly, hardware components and software components of the network for handling the project should relate directly to the business operations. Personal components like the ones in Bring Your Own Device (BYOD) technology will not be considered hence no resource will be allocated to meet these subsystems.
Risks
Risk identification is one of the major steps of risk management process and it involves identifying all the risks that might face a project. However, according to Project Management Body of Knowledge or PMBOK, risks can be categorized into various sections of a project like resources, scope, schedule, stakeholders and other categories (Project Management Institute, 2013). The following is a list of the risks according to these categories.
Resources risks: These risks are likely to be caused by various characteristics of the resources that a project manager will use. The following are the resources risks:
1. Lack of resources with the required skill sets and experience. The project manager may fail to get project team with the required level of skills hence making some of the project objectives not to be met. For instance, the team members may not have adequate skills in system configuration or installation of a particular software. This will make the project to take longer than expected.
2. Lack of enough team members: the acquired team members may not be enough to perform the project tasks within the require timeline. This may be due to environmental issues, legal-political issues and other external factors.
3. Lack of adequate training for the available team members to ensure they have the required skills to accomplish the project tasks. Training may be required for specific vendor components and due to lack of training from the vendors; the team members may not have the adequate skills to handle the components.
4. Poor performance of the project resources. The staff members for the project may fail to deliver according to the expectations of the project manager and other stakeholders.
Communication Risks:
1. Misunderstanding and misinterpretation of the requirements may lead to poor performance of the project through development gaps between hardware and software developers.
2. Language barriers among the project team members may lead to no communication of critical aspects of the project such as progress, requirement analysis and other elements.
Scope risks:
1. The scope may omit some critical element of a project or involve errors in a particular item thus leading to unsatisfactory results on that task.
2. Uncontrolled and continuous growth of the scope due to unmanaged changes may lead to poor delivery of project milestones in terms of time and budget (Project Management Institute, 2013).
Schedule risks:
1. Underestimation of task duration will lead to the project staying behind the schedule.
2. Omitting a critical task from the schedule will lead to extra time for the project.
Technical risks:
1. The hardware and software components acquired may fail to meet the minimum requirements under various legal frameworks, policies and regulations.
2. Incompatibility issues for the acquire hardware and software may lead to additional resources to be allocated for addressing the incompatibility issues.
3. The technologies acquire may be old fashioned and full of patch management issues, security issues and expose the company to threats.
Constraints of the Project
1. The Information Technology department and an external auditor need to approve all the procured data applications, information systems and hardware components.
2. The project stakeholders should gain state approval before commencement of the project.
3. The project is up for completion within sixty working days.
4. The project requires to meet the security measures by using the Confidentiality, Integrity and Availability triad as a benchmark.
Assumptions of the Project
1. The project team works only from Monday to Friday except during the public holidays. The working day has a minimum of eight hours.
2. The project does not have any funding now apart from the project owner’s funding.
3. The organization has some hardware and software in place that the project will reuse.
Interfacing with other Systems
Database and interfacing: the project will ensure expansion of the current database to develop a data warehouse that will be interfaced with all system applications. The project will involve converting all the current databases into data warehouses for efficiency in data management. The database schemas, logical databases, physical databases and conceptual database models should be in line with the database warehouse processes (Rifaie, Kianmehr, Alhajj, & Ridley, 2008). Interfacing will ensure that the ecommerce website feed the data warehouse with the require information that the organization employees can fetch and work upon.
Security integration: the security integration will ensure that all the project components like databases and data warehouse, information systems, wired LAN and wireless LAN have appropriate security controls. This integration will involve having an encryption method for the Information Technology (IT) network, authentication and access control methods for the information systems and access control for the network resources through the local area network (Aydın, Zaim, & Ceylan, 2009).
Networking: the project aims to integrate the networking aspect into the system by having components such as the file servers, database servers, web server, firewall, routers, personal computers and connecting media or cables supporting the communication. The project will implement a local area network with different network location such as main office network, public network employees’ network. The networks will have a very fast backbone cable like the optic fiber to reduce latency and packet loss and allow fast communication with the outside world.
Definition of Terms
Data warehouse: a large central database within an organization to which all sources of data are connected. A data warehouse is used for managerial purposes.
Information system: a software application for accessing and managing information in the organization. Information systems provide an interface for manipulation of the organizational database.
IT infrastructure: a network architecture or collection of computer network devices of the organization.
OLAP: an acronym for Online Analytical Processing. The processing is used to provide analytics services to the company.
OLPT: an acronym for Online Transaction Processing. The processing is used aid online purchase during ordering of products (Kemper & Neumann, 2011).
References
Alexandrova, A. (2012). Business requirements analysis and development for legacy system replacement projects in government organizations. In 2012 20th IEEE International Requirements Engineering Conference, RE 2012 - Proceedings (pp. 337–340). https://doi.org/10.1109/RE.2012.6345833
Aydın, M. A., Zaim, A. H., & Ceylan, K. G. (2009). A hybrid intrusion detection system design for computer network security. Computers & Electrical Engineering, 35(3), 517–526. https://doi.org/10.1016/j.compeleceng.2008.12.005
Kemper, A., & Neumann, T. (2011). HyPer : A Hybrid OLTP & OLAP Main Memory Database System Based on Virtual Memory Snapshots. ICDE, 195–206. https://doi.org/10.1109/ICDE.2011.5767867
Khan, A. (2006). Project scope management. Cost Engineering, 48(6), 12–16. https://doi.org/doi:10.1201/b15011-4
Lee, G., Eastman, C. M., Taunk, T., & Ho, C.-H. (2010). Usability principles and best practices for the user interface design of complex 3D architectural design and engineering tools. International Journal of Human-Computer Studies, 68(1–2), 90–104. https://doi.org/10.1016/j.ijhcs.2009.10.001
Project Management Institute. (2013). A guide to the project management body of knowledge (PMBOK ® guide). Project Management Institute. https://doi.org/10.1002/pmj.20125
Rifaie, M., Kianmehr, K., Alhajj, R., & Ridley, M. J. (2008). Data warehouse architecture and design. IEEE International Conference on Information Reuse and Integration, 58–63. https://doi.org/10.1109/IRI.2008.4583005
project_deliverable_3.docx
Running head: DATABASE AND PROGRAMMING DESIGN
DATABASE AND PROGRAMMING DESIGN 11
Project Deliverable 3: Database and Programming Design
Section 1: Design Document
(Student's Name)
(Professor's Name)
(Course Title)
(Date of Submission)
Introduction
Every organization desires to have reliable and efficient methods to manage their data. Businesses that have implemented technology into their day to day operations get to generate a lot of data. This data is vital to the organization and as such requires being not only processed accordingly, but also safeguard against the dangers that might arise from that medium. Data generated by an organization can be processed to provide insights that senior management can leverage in decision making for the company. Given the high stakes involved with this data, it is necessary that the processes that manage the data are able to meet the demands placed on them and be able to do so without compromising the integrity and the quality of data passing through them. Once the underlying systems and processes are solid enough, then the insights they provide tend to flow in the same direction and can be depended upon by the organization’s decision makers.
Dayton.com is the one stop site for owners of vintage vehicles wishing to find parts for their vehicles and also seek out restoration services. The sites host tens quite a large number of partners who display their products and services on the site. Customers browse the site to find their preferred products or services and make payments on the site. Once orders have been placed, payments are also done on the site. Dayton.com acts as an intermediary between the sellers and buyers. All payments are held in an escrow account until the customer receives their product. With the existence of personally identifiable information and financial transactions, information security has been a priority.
This organization will be making use of a relational database for the storage and processing of its data. Data records are stored once in relational databases. These databases can perform extremely complex queries which are used to produce reports. Within relational databases, it extensibility allows that modifications can be made without changing the existing records ensuring both old and newer data is available for use whenever required. This type of database is efficient for data security since data is usually split into tables which can be separated. As such, any sensitive data that an organization has can be kept separate from its general data by storing them in separate tables.
Dayton.com has ten members of staff. Like any other organization, it needs to have systems in place to better manage these employees. The relational database can be used in staff information management. All information pertaining to a given employee of the company is recorded. This included their personal information and also their job descriptions and department within the company. Every employee profile gets to have privileges within the databases which will vary according to their responsibilities. Read and write permissions are also assigned to the profiles and will also follow the same criteria. Employee evaluation and appraisal can be done and aided by information that is in these profiles. This can be through an option that employees have to sign-in whenever they report to work. The following database schema presents how employee information can be managed through the relational database. To avoid redundancy and make querying much more manageable, there will be normalization of the database to present a single instance of the data. The goal is to have database that is streamlined as possible. (Carter, 2015).
Figure 1: Database schema
Rationale
A primary key can be used to uniquely identify a department. As the identifiers of a particular department, every piece of information belonging to an employee in that department is kept in the corresponding table. With their own code, every new bit of information being entered in to the database can then be duly directed to the department where it belongs to.
Within an employee table will be every piece of data belonging to an employee and collected from the time they joined the organization. Each employee will have a primary key attributed to them. For identification within the database, employees will have a system-generated unique key in addition to their own social security number. Apart from the expected personal identifiable information, of their name, age and gender, employees will also have their work history recorded. This will have details of their responsibilities and job description and also their qualifications. Should there be a change in any of the information presented in the database; the necessary modification will be made ensuring that the employee table always stays up to date. This should make reporting streamlined and also assure of the integrity and accuracy of insights provided by the database.
A field known as emp_contract_start_date will specify when an employee’s contract with the company began and the emp_contract_end_date field will specify when the contract ends. This should provide the length of the contract and will be updated should the contract be terminated or extended. Each employee will have this field for their tables.
Given the round the clock requirements for managing the site, employees will be working in shifts. A shifts table will be identified by a code and the details of that particular shift will be entered in that specific table. This will include the timelines of a shift, work done in that shift and the employees that were present in that shift.
An attendance table will exist for the purpose of tracking employee progress. Each employee will have targets set out for them. These will be divided into daily, weekly, monthly and annual targets. Whenever an employee hits or misses their target, it will be duly indicated on the table. As these targets are tied to the overall company targets, the information on this table should not only provide employee performance, but also that of the company (Coronel, & Morris, 2016).
Referential Integrity
Referential integrity will be applied to the database to not only avoid conflicts but also ensure that records within the database stay up to date. Should an employee be promoted, this information will then be used to update their job description, performance targets and any other aspects of their records where it might be relevant. The same will also happen should an employee be either terminated or their contract not renewed necessitating their removal from the database. Instead of doing so for every instance of the employee’s information, it should happen automatically once it has been specified. This use of referential integrity should promote a consistent flow for the database and avoid the tedious work of modifying tables in isolation.
There will be a provision specifying that in a table with a non-null value as the referencing column, there shall be no row if an equal value isn’t in the reference column. This should provide assurance for the prevention of loss of data when updates are been made.
Figure 2: The Entity Relationship Diagram
Rationale
There will basically be four objects interacting in the employee aspect of the database. These will be the department, employees, and shift and attendance tables. The department table will inherit from the employee table. These two tables will have a one-to-many relationship and the employees table will have one department in many instances.
The attendance table will be inheriting from the shift and employee tables as the targets will be from the job description and the time the employee works. A one-to-many relationship is to be established between the attendance table and the employees and shift tables. (Martin, Chapman, & Leben, 2009).
Figure 3: The dataflow diagram
Shown above is the process of setting up the functionalities of a system before it can begin its operations. The sequential process will begin with the department tables which will then be followed by the employees’ tables and its accompanying relationships. The shifts table and the attendance table will then be created in that order. Once data has been fed into the database the data processes will then begin.
Sample Queries
Sample Queries are as follows:
SELECT * FROM employee
Displays all the employees of the company
SELECT employee.emp_fname, employee.emp_sname, attendance.date, attendance.shift, attendance.time_in, attendance.time_out
FROM attendance
LEFT JOIN employee
ON attendance.emp = employee.id
Displays all employee attendance records
Screenshots
Figure 4: Employee Edit Screen
Figure 5: Shift Record Screen
Conclusion
As previously stated, Dayton.com will not only use its database for storing and processing information but also to gain insights. The reports produced by the database will form basis for decision making by senior management. For the above outlined employee aspect of the database, the performance of the company will be gleaned from the database as tied to the employee records. Where staff members affect the progress of the organization, then improvements can be made as seen fit. This should extend to other aspects of the company, providing viable and actionable insights for the benefits of the entire organization now and in the future.
Carter, J. (2015). The relational database. London: Chapman & Hall.
Coronel, C., & Morris, S. (2016). Database systems: design, implementation, & management. Cengage Learning.
Martin, J., Chapman, K. K., & Leben, J. (2009). DB2, concepts, design, and programming. Englewood Cliffs, N.J: Prentice Hall.
image5.png
image1.png
image2.jpeg
image3.jpeg
image4.png
project_deliverable_4.docx
Running head: NETWORKING ASSIGNMENT
NETWORKING ASSIGNMENT
Networking Assignment
Student’s Name:
Instructor’s Name:
University:
Date of Submission:
Physical topology
A physical topology illustrates how nodes in a computer network are physically linked and entails aspects such as physical distances between nodes, geographic location of the nodes, signal strengths of network links and other environmental features such as humidity.
The network configuration is made for a medium company. The company is made up of five departments which include the HR department, the sales and marketing department, the IT department, the stock department and the finance department. The departments, the meeting room and the server farm are all in different rooms (Sharma, Bala & Verma, 2012). The connection between the company and the ISP is done by a fiber line. From the modem, the internet connection is done by an Ethernet line (Tbase1000). The main network components are: fiber line, Ethernet lines, routers, switches, a modem, the firewall, a wireless access point, laptops and computers. The connection of the network nodes used both bus and star topologies. The physical connection was done with best networking practices in mind and are as shown in the diagram below. It is also imperative to note that the network encompassed both wired and wireless internet connection. The connection was done with the objectives of providing high network capacity, high bandwidth, having capability for future expansions, having high speed connection and security, having high fault tolerance hence considerably increasing the efficiency of the company’s operations.
Logical topology
The logical topology is the arrangement of network devices in a computer network illustrating how they communicate with each other. The logical topology is crucial in indicating how signals behave on the network. The topology stipulates on how nodes in computer networks communicate across their physical topologies hence the logical topology is considered to be isomorphic to the physical topology. First, the network entails the use of a bus topology. This is a set up whereby nodes are connected to a common bus. The topology in the network also uses the shared media topology whereby all systems can access the physical media when there is need to do so hence offering the advantage of unrestricted physical media access.
The network topology for the company uses the Ethernet topology. The connection between the service providers to the company’s internet distribution point entails the use of a bus topology whereas the redistribution of the connection to the company’s departments entails the use of star topology. The internet allocation from the company’s ISP is done by a DNS server. The company is allocated IP address 13.100.10.0/29. After going through the Firewall the IP address is divided into 13.100.10.1/29 after which it goes to the boundary router with 6 ports: Fa0/1.10, Fa0/1.11, Fa0/1.12, Fa0/1.13, Fa0/1.14, and Fa0/1.15. The IP address is sub-netted into various subnets which encompass all the company’s departments. The HR department is served by IP address 192.162.11.0/24, the sales and marketing department is served with 192.162.12.0/24, the stock department is served with IP address 192.162.13.0/24, the IT department is served with IP address 192.162.14.0/24 while the finance department is served with IP address 192.162.14.0/24. Each department’s network host is allocated its IP address through the use of subnets. In addition to this, there is a wireless access point in the meeting room, a printer server that is connected to the network and a server farm that houses all the company’s servers and which is connected to the rest of the network. It is ascertained that best practices of computer networking were put into consideration when coming up with the logical topology for the company. IP addresses where allocated accordingly without any wastage while still leaving room for upgrading.
Possible placement of servers
When determining the possible location of servers, the physical and logical topology aspects of the network were taken into consideration. It was imperative to place the servers in a place whereby they could be secure from intrusion by third parties. It was also important for the servers to be able to offer their servers and to be accessible whenever needed. As such, it was decided that all servers would be housed under one server farm. Since this was a small company with limited space and resources, placing all the servers in one server farm helped in avoiding the issue of inadequate space (Awodele, 2012). Placing of the servers in one server farm also helped in making their configuration to be easy since all the servers were fed by one Ethernet cable hence saving on the cost of having multiple Ethernet cables. The company encompassed the use of a web server, a file server and an email server. All these servers were readily available to the rest of the network. However, their configuration and their operation could only be done by the company’s network administrator.
The placement of the servers in the site topology has a direct effect on active directory availability. When planning the location of the servers, the following aspects of networking where taken into consideration; the place to place the network location server, how to configure a highly available intranet Web server to function as the network location server and the planning for redundancy. Placing the servers in the correct location was very important since wrong placement would mean direct access client host computers would not be able to locate the secure webpage on the network’s server hence would not be able to access the network’s intranet resources (Awodele, 2012). The web server was confirmed to be able to support HTTPS URLs which had certificate based authentications hence meaning that there would be secure accessing and using of the server. Lastly, the planning on where to place the servers also took into consideration the aspect of redundancy. Logical redundancy was configured into the servers to ensure high operability even during fault sessions. However, it was noted that the placement of servers being fed by one Ethernet cable was not fault tolerant since if something happened to the cable leading to it being unable to transmit signals, then the whole server farm would not be accessible and hence the whole network would not be able to function efficiently.
A comprehensive security policy for the company
The principles of CIA encompass aspects such as confidentiality, integrity and availability which form the CIA triad. This model is designed to ensure there is effective policies guiding on an organization’s information security. The company’s network design and configuration will be stipulated by a comprehensive security policy that internalizes the core aspects of CIA (Perrin, 2008).
In ensuring integrity, the network will be made to ensure that the information that passes through it cannot be accessed by third parties. In the contemporary times, there have been increasing cases of security compromising whereby sensitive data is stolen from organizations and used for criminal activities. Due to this, the network will encompass the use of security protocols. With regard to the level of protection that is offered, an existing communication security protocol with significance with the level of protection that is offered is the secure file transfer protocol. This is a network protocol that entails file transfer, file access and file management only over a reliable data stream. The network also encompasses the use of security measures which will ensure that there is no sniffing of information or communication in the network. Some of the components to include in the network include software such as Wireshark which monitors the activities that take place in the network (Perrin, 2008).
Integrity on the other hand entails the aspect of ensuring that information that is made for one party is not accessed by unintended parties. In this case, the network will encompass the use of data encryption which will ensure that any attacker who tries to intercept the data cannot understand it. The use of passwords will be employed to ensure that intruders are not able to access the network hosts and that people with limited privileges are not able to abuse other user’s privileges.
Availability will be ensured by using a reliable ISP which will ensure that there is constant internet connection. There will be a redundant power supply which will ensure that power interruptions do not interfere with the operations of the network (Perrin, 2008).
Ethics will also be checked upon when designing the network. An ethical code will be designed which will stipulate on what can be done and what cannot be done. Password infringement as well as abusing of other people’s privileges will be outlawed. In essence, the users of the network will be advised to use it within its stipulated scope and within their privileges.
References
Sharma, G., Bala, S., & Verma, A. K. (2012). Security frameworks for wireless sensor networks- review. Procedia Technology, 6, 978-987. Retrieved May 18, 2017 from, http://www.jstor.org/stable/24233492
Awodele, O. (2012). Vulnerabilities in Network Infrastructures and proceedings.informingscience.org Retrieved from : http://proceedings.informingscience.org
Perrin, C. (2008). The CIA Triad. Retrieved from http://www.techrepublic.com: http://www.techrepublic.com/blog/it-security/the-cia-triad/