Security Project/Project Management Final Assessment

Case Study Objective:

The purpose of this Case Study is to empower students to achieve competency in the learning outcomes while working on similar conditions as in the real world. The teacher will pose as a senior executive of the company and can be consulted via email.

Students will use this document as Existing Documentation and will build their project in accordance with the provided assessment guide for the subject being studied.

Case Study Background

(YOUR INITIALS) Corporation is a Sydney based company founded in 1990. The company is involved in the distribution of medical supplies and equipment to hospitals, nursing homes, pharmacies, doctor's surgeries and other medical practices. The company distributes its products Australia wide from its Head Office in Sydney and two other operational sites in Melbourne and Brisbane.

During the first 10 years of operations (1990-2000) the company experienced a steady growth of 3% per year, however, this performance was a disappointment for shareholders and management alike as revenue growth was below expectations. The company engaged the services of a Systems Analysis and Design firm to audit the company capacity for growth. The Consultants identified that the slow growth was due to the lack of Information Technology Infrastructure as the system in place was primarily a manual system, no computers were being used and no automated processes were in place. As result (YOUR INITIALS) Corporation commissioned an Information Technology Infrastructure in 2001 (this Infrastructure is still use and is described in this Case Study).

The following 10 year period (2001-2010) a tremendous growth of 20% per year was experienced and (YOUR INITIALS) Corporation became the market leader by capturing 55% of the Australian market.

After this extraordinary success shareholders and management became too complacent and neglected to update their Information Technology Infrastructure as time went by. As a result the company went through a slow decline but growth continued at a steady pace of 10% per year; this growth was reliant on a number of successful low cost high profit prescription medicines that (YOUR INITIALS) had exclusive distribution rights in Australia. Competitors, however, invested heavily in new technologies and made good use of the Internet while (YOUR INITIALS) Corporation was left behind with its slow and expensive to run business model.

By 2012 the company market share had dropped to 30% while new upstart companies were selling goods Australia wide and to the world via e-commerce and gaining more and more market share capitalising on the opportunities that the Internet age was offering.

In anticipation of the 2015 Annual General Meeting management began a soul-searching exercise, as the company performance was now so low that unless major decisions were made it could spell out the end for (YOUR INITIALS) CORPORATION as a viable business. Most of the problems were identified with the management and workers attitude for not embracing new technologies.

At the 2015 Annual General Meeting shareholders promoted Dr. Galen Wilson as Chief Executive Officer, he vowed to bring back (YOUR INITIALS) to its former glory as market leader within 5 years under the mission statement:

 "Increased efficiency for the benefit of all"

Case Study Report - Submission Requirement

Individual analysts from TAFE will be employed for this task and each will individually produce the following documentation to be submitted per the specified due date.

1. A Project Request Form - describing the business operations requirements and specifying IT infrastructure as per the organisation's user requirements.

2. A report stating Functional Specifications in terms of hardware, software and security requirements

a. Identify and assess assets such as:

- Hardware - Number of Workstations and Servers required, Type of Server required, e.g. Web, mail, application, files etc.

Routers, switches.

- Software - Operating systems and applications.

b. Feature list

- Central Repository for Documents, Email, Active Directory, and VPN Server.

c. Security

- Levels of Security in terms of user authentication and  authorization and auditing

- The use of Router Access Control List(ACLs) is compulsory

- Develop a Security Risk management plan

- AAA concepts are integral to the design of the various sections of the network.

3. Network Design Report and Implementation Plan.

a. A proposed Network Design Diagram incorporating Physical topologies, with VLANs composed in Packet Tracer.

(The config files are to be completed to match your network design)

b. Identifying hardware and software to be implemented for the proposed network design based on industry specific technology. Identify models and manufacturers based on your list in point 2a. (A spreadsheet format is preferred.)

c. Include the following hardware and services within your Network Design:

- Windows Server 2012 at each location with Active Directory (AD) at Head Office, Windows Server Child Domain (Branch Office)

- Site to Site Replication of Users Home Drive Data to the File server (storage) using a Distributed File System (DFS).

- Firewall/Proxy and a Connection to an ISP using a Router

- Email Server, Linux Samba Server, Web Server, DNS Server and DHCP Server

4. Implementation and Contingency

a. Using Microsoft Project prepare a Gantt chart highlighting your implementation plan which includes:-  task allocation, duration, and sequence of task completion

b. Prepare a Contingency plan

5. A practical implementation of the network based on the proposed network diagram highlighting the following features:

a. Routing using OSPF or EIGRP and using protocol suite such as IPsec, SSL for securing IP communication

b. Establish an Access list with redundancy protocols

c. Client/Server Communication.

Each analyst shall submit their report to the board of directors. Following a review the Director's shall decide on the final implementation.

Attachment:- Assignment Files.rar