Cybersecurity Architecture & Engineering

SCENARIO

As the newly promoted LAN administration and security manager for Healthy Body Wellness Center’s (HBWC) IT Department, you are tasked with designing a multilevel target security architecture using the “Business Requirements Document Template” you created in Task 1. Then you will need to conduct a DREAD analysis on your multilevel architecture design.

The technical requirements and specifications for the multilevel target security architecture should be based on the business, functional, and security requirements you documented in the “Business Requirements Document Template.” The target multilevel architecture should include the Small Hospital Grants Tracking System (SGHTS), payroll system, and research data that meet the standards and regulations of the National Institute of Health (NIH) and the federal government, including HIPAA and industry best practices.

REQUIREMENTS

Current Systems: Summarize the systems currently being used at the Healthy Body Wellness Center using details from attached case study and assessment report. (HBWC) You may use the information you provided in the BRD template from your Task 1 submission. Record your summary in the “Current Systems” section of the attached “Business Systems Design Report Document.”
Expected result: This part is intended to accurately summarize the systems currently being used at the Healthy Body Wellness Center (HBWC) using details from the case study and security assessment report. The summary is recorded in the “Current Systems” section of the “Business Systems Design Report Document.”

B.    Goals, Objectives, and Rationale for New System: Outline the purpose, goals, objectives, and rationale for the proposed system, including a clear statement of the problem using the information provided from the “Healthy Body Wellness Center Case Study” and the “Healthy Body Wellness Center Security Assessment Report” to justify your claims. Record your responses in each subsection of the “Goals, Objectives, and Rationale for New or Significantly Modified System” section of the attached “Business Systems Design Report Document.”
Expected result: This part is intended to accurately outline the purpose, goals, objectives, and rationale for the proposed new system, using details from the case study and security assessment report to substantiate claims. All responses are recorded in the “Goals, Objectives, and Rationale for New or Significantly Modified System” section of the “Business Systems Design Report Document.”

C.    Factors Influencing Technical Design: Explain the relevant standards, assumptions, dependencies, constraints, and design goals that influence the technical design of the proposed new system. Record your responses in the “Factors Influencing Technical Design” section of the attached “Business Systems Design Report Template.”
Expected result: This part is intended accurately explain relevant standards, assumptions, and dependencies based on the proposed system, including constraints and design goals. All responses are recorded in the “Factors Influencing Technical Design” section of the “Business Systems Design Report Document.”

D.    Proposed System: Determine the necessary requirements to achieve the proposed system and its associated technical design, including the multilevel architecture specifications and design. Include all required tables and diagrams as part of your submission. Record your responses in all subsections of the “Proposed System” section of the attached “Business Systems Design Report Document.”

Expected result: This part is intended provide accurate representation of the proposed systems requirements and associated architectural design documentation. All information provided reflects the proposed design and addresses requirements represented in the case study and the security assessment report. All responses are recorded in the “Proposed System” section of the “Business Systems Design Report Document.”

E.    DREAD Analysis: Conduct an analysis of your multilevel architecture using the attached “DREAD Workbook.” Record your results in the “DREAD Workbook” and include the workbook as an attachment. Your workbook should include a minimum of ten threats.
Expected result: This part is intended contain the completed attached “DREAD Workbook that includes an accurate prioritized list of a minimum of ten threats or risks to both hardware and applications.

F.    Analysis of Proposed System: Summarize your findings from the DREAD analysis by prioritizing and describing the top five risks identified in the “Listing of Threats” worksheet, including mitigation, risk acceptance, and justification for your decisions. Record your responses in the “Analysis of the Proposed System” section of the attached “Business Systems Design Report Document.”
Expected result: This part is intended to include the prioritization of the top five risks represented in the DREAD analysis with a description of each risk, and the associated risk mitigation or acceptance for each risk. The mitigation or acceptance of the risks are supported with details to justify the information provided. All responses are recorded in the “Analysis of the Proposed System” section of the “Business Systems Design Report Document.”

G.    Acknowledge sources, using in-text citations and references, for content that is quoted, paraphrased, or summarized.

Expected result: This part is intended to include in-text citations for sources that are properly quoted, paraphrased, or summarized and a reference list that accurately identifies the author, date, title, and source location as available.

H.    Demonstrate professional communication in the content and presentation of your submission.
Expected result: Content reflects attention to detail, is organized, and focuses on the main ideas as prescribed in the task or chosen by the candidate. Terminology is pertinent, is used correctly, and effectively conveys the intended meaning. Mechanics, usage, and grammar promote accurate interpretation and understanding.