ITC568 | RISK ASSESSMENT ITEM 2 | CLOUD COMPUTING

Tasks

You have been engaged to provide a risk assessment for the planned moves to SaaS application offerings.

You are to write a report that assesses the risks to the charity for just their planned moves in the HR area:

1. Consider the data and information that the charity holds on its employees in the current HR system. 
   1. Establish the existing threats and risks to the security of that data and information contained in the in-house HR database. (10 marks)
   2. 1. Are there any additional risks and threats to employee data that may arise after migration to an SaaS application? (10 marks)
      2. Assess the resulting severity of risk and threat to employee data. (10 marks)
   3. Consider the privacy of the data for those employees who will move to an SaaS application. 
      1. Establish the existing threats and risks to the privacy of that data and information contained in the in house HR database. (10 marks)
      2. Are there any additional risks and threats to the privacy of the employee data after migration to an SaaS application? (10 marks)
      3. Assess the resulting severity of risk and threat to the privacy of employee data. (10 marks)
   4. What are the threats and risks to the digital identities of charity employees from the move to SaaS applications? (10 marks)
   5. 
      
   1. Consider the operational solution and location(s) of the SaaS provider for HR management. Does either the operational solution, or the operational location, or both, increase or mitigate the threats and risks identified for the security and privacy of employee data? (20 marks)
   2. Are there any issues of ethics, data sensitivity or jurisdiction that should be considered by the charity? (10 marks)
   You are to provide a written report with the following headings:
   • Security of Employee Data
   • Privacy of Employee Data
   • Digital Identity Issues
   • Provider Solution Issues
   • Data Sensitivity
   As a rough guide, the report should not be longer than about 5,000 words. 
   Rationale
   This assessment task will assess the following learning outcome/s:
   • be able to examine the legal, business and privacy requirements for a cloud deployment model.
   • be able to evaluate the risk management requirements for a cloud deployment model.
   • be able to critically analyse the legal, ethical and business concerns for the security and privacy of data to be deployed to the cloud.