Question

Chosen Business: KFC

NO COPY PASTE PLEASE ( PLEASE PLEASE ANSWER)

2. Business analysis Includes analysis of profitability and popularity of different categories of the business, discussion of other issues, if any, to consider, for example discuss security and privacy of customer and systems in the business develop and compare alternative solutions to the problems consider the advantages and disadvantages of various possible solutions discuss the best solutions and discuss recommendations for action * "

Answer 1

Discuss the security and privacy of customers and systems in business

Example of Private Customer Data & Why they should be secured

Security and privacy of customers and systems in business are important  it involves protecting key database assets. The key assets in the the Database such as the details like identification , address, telephone and mobile phone numbers, vendor and employee bank account information for recurring payments These are highly sensitive in nature and can easily be misused for fraudulent purposes.

Another example of privacy and security would be EHR systems of electronic health records. Electronic Health Records or EHR's are digitized patient records & medical history that can be updated on a real time basis and reviewed. Health records are extremely private data and are meant to be accessed by authorised personnel only.

Examples of how customer data can be compromised and misused

Cyber warfare is a serious problem due to the Rise in anonymous hacking. The rise in technology has also been followed by a sharp rise in cyber crime.This is primarily because this give criminals a great degree on anonymity. 2017 Has seen a series of hacks and infiltration by a ransom spyware known as "wannacry". This bought down the entire electronic health records of the British Health Care Institutions, this spyware held the data hostage and demanded payment in Bitcoins in exchange for the retrieving the data.

This is why the security and privacy of customers is of paramount importance

Develop and compare alternatives solutions to problems

SSO Log In or Security Domains & User Authentication and Access Control

The intranet is generally accessed using an SSO login or a single sign on access and then for each individual internal application, employees could set up multiple user id's and password. This ensures that even if the SSO Log in is compromised. core application are still safe and secure. Ensuring that only authorised personnel have access to the vendor management platform.

Having Stand Alone SystemsIt is better to have stand alone applications in an organisation as opposed to an integrated software system that handles all application processes and has a singular point of access. Stand alone systems are often provided by vendors who's core competency and domain expertise lies in a specific type of application. This allows them to diversify in the applications features to a degree that is un paralleled. This isn't the case with integrated systems, although they do integrate every application into one.

Consider the advantages and disadvantages of various possible solutions

Advantages	Disadvantages
Pros : Two step verification process ensures enhanced security and adds an additional layer of protocol.	Cons : if the device or the medium through which the token is sent has been compromised, the MRI machine can still be accessed.
Pros: This method is very cost efficient and won't require a massive information technology overhaul in order to implement it	Cons : Requires regular information technology system maintenance and upgrades and patches

Discuss the best solutions and discuss recommendations for action

My recommendation for action would be to start by Developing an IT strategic plan. The purpose of an IT department in an non IT organisation is to support other business functions and their core competencies by creating internal business systems and softwares that facilitate seamless functioning of those businesses within an organisation. The reason why the IT department within an organisation develops a strategic plan is because the purpose of the IT department of an organisation should be to fit into the overall organisational strategy and the strategic planning of a firm. A part of an IT strategic plan could also include a cyber security strategy. This is a comprehensive 360 degree approach to securing both customer as well as enterprise information.

Server Security and Availability of the key assets

For server security its best to rely on their party servers like IBM. DELL or Amazon Web Servers or Microsoft Azure. Third party services shield the data form being hit with down time and also have better build security than a system thats developed from the ground up under one roof, being hosted on privately rented or bought servers. Servers also need to be protected since thats where the data is stored.

Robust internal architecture

An IT system's internal architecture will determine its security, operability, reliability . adaptability to the business functions it serves. Because each language within programming is designed to serve a specific purpose .