PART A Answer
PART A Answer
PART A Answer
Company Information
Tech Comm Template BRD
1 Document Revisions (Not required for performance assessment)
Version
Date Document Changes
Number
05/02/20xx 0.1 Initial Draft
3 Introduction
3.1 Project Summary
3.1.1 Objectives
The purpose of Healthy Body Wellness Center is to help the patients and society to take proper care of
their wellbeing. It is further responsible for distributing the medical grants and The Small Hospital Grant
Tracking System (SHGTS) is used for managing and tracking its data. It records the first delivery of the
grant funds and then follows the other hospitals in which the unused grants are further rotated. All the
grant evaluation work has to be done through an application and due to the paper reduction Act, the
paper based manual applications are transferring to computer based online application submission which
has ultimately increased the number of medical grants. The OGG is expecting to get more grants thus
need to engage more office staff that requires the need to update the infrastructure and to grow the grant
sources. They are also heading towards the development of the web-based portal which will contain
information of patients.
3.1.2 Background
The need of upgrading from LAN to WAN created a need for a security audit of the Healthy Body
Wellness Center to address the changes that needs to be implemented in order to ensure a modernized
and secured network. The key findings include that the system’s infrastructure needs to be updated, web
based services lack the security checks, lack of a proper database. The data backup and recovery systems
should be developed and the security analysis needs to be conducted to the system’s security needs and
develop a secure system to be used by the recipients.
3.1.2.1 Business Drivers
The major driver for this business is the security needs and lack of cryptographic controls, customer
satisfaction and relationship, employee development, quality improvement and financial analysis and
accountability and backup and recovery management. Another major reason was expanding business
engaging new employments and the unavailability of patches for current system by Microsoft after 2020
that prompted them to move to MySQL.
3.3.2 Constraints
Time schedule
Cost
Unavailability of Resources
Quality of the system
3.3.3 Risks
Change in demands by stakeholders
Change in resources, decided time and cost
Exploitation of vulnerabilities
Hacking attacks or virus
Loss of potential data as we are upgrading the existent system.
3.3.4 Issues
System proposed is web-based portal, so unavailability of internet can cause issues like loss of data,
hinderance in process completion
Availability, confidentiality, reliability of system
Training of employees
Requirements are not complete
5 Business Requirements
[The specific business requirements elicited from stakeholders should be listed and categorized by both priority and area of functionality to
smooth the process of reading and tracking them. Include links to use case documentation and other key reference material as needed
to make the requirements as complete and understandable as possible. You may wish to incorporate the functional and nonfunctional
requirements into a traceability matrix that can be followed throughout the project.]
The requirements in this document are prioritized as follows:
Security Requirements
Hospital staff
To provide backup and recovery in case
High ()one managing
of data loss or any failure
the ystem
Usability Requirements
Audit Requirements
ID Requirement
1 Privacy
2 Reliability
3 Customer Relationship
4 Fault Tolerance
5 Accessibility and efficiency