MGB Ltd is a Company that has Previously Handled Claims for Social Security: Information Security Management Report, SMU, Singapore

The scenario

MGB Ltd is a company that has previously handled claims for social security benefits. It has recently acquired two other businesses

1. ECHRS Ltd, a “human resources” services company, and
2. SYDFP Ltd, a student data handling company.

MGB currently has offices in Manchester (its HQ), Newcastle, Bristol, and London. Each office has its own database of cases. ECHRS are based in Bradford and provide a telephone and web-portal outsourcing service for human resources records and payroll for a range of companies across diverse sectors. A specialist division of ECHRS based in Leicester handles occupational health services via a pool of doctors and nurses. Their contact with external clients is normally via the ECHRS staff at Bradford. SYDFP is based in Birmingham and handles student record data for a number of universities. They have a single site with a single large server. They have a single member of staff hosted at each customer university to assist with troubleshooting.

The MD of MGB has outlined his intent as follows.

• Aggregate all data storage functions at MGB’s HQ in Manchester. A mixture of web portals and remote desktops will provide access for all staff users.
• SYDFP is to withdraw the staff hosted at customer universities and replace them with web chat services.
• All three companies will share a new customer index database. This will list all individuals and organizations that are or have been a customer of any of the companies. The customer index database will include a reference to the full record(s) in the individual customer databases.
• All three companies are to expand by using the new customer index database to identify new opportunities.

Your task

You should write a report of around 2500 words advising the MD of MGB Ltd on suitable secure network infrastructure for MGB and its newly acquired subsidiary companies. You should address the following issues:

1. Demonstrate a broad understanding of the professional, ethical and legal compliance considerations around network security.
2. Analyse a range of network security concepts, principles and practice in an appropriate environment.
3. Evaluate potential secure infrastructures to meet an appropriate business requirement.
4. Select and justify appropriate security techniques to meet an appropriate business requirement.
5. Operate ethically in order to implement and test a secure infrastructure to meet an appropriate business requirement.
6. Communicate effectively and professionally in writing.