Sr-Rm-022 Section 2
Section 2 for Service Request SR-rm-022 – Analyze HR System
Andrew King
BSA/375
July 6, 2014
Dr. Todd Feuerherm
Abstract
This paper will describe the application architecture and process design that Riordan Manufacturing will use to implement their new HR system. It will provide an overview of the recommended security controls, and describe the system’s architecture in terms of data, processes, interfaces, and network.
Section 2 for Service Request SR-rm-022 – Analyze HR System Now that the system requirements are in place, the scope has been set, and the feasibility has been assessed, the application architecture and process design can begin. “Application architecture is the organizational design …show more content…
Use of Single-Sign-On (SSO) in conjunction with the enterprise Active Directory server will be the first step to securing the system. This will only allow those that have a defined HR role to access the system. Within the application multiple roles will also be defined. These roles will have different access levels and can be assigned to enterprise personnel active directory accounts as needed. (Active Directory Single Sign-on (SSO) and LDAP Integration: Okta.) Active directory implementation will allow segmentation of the HR system to only allow views into what is needed. For example allowing the HR Director access to all employee records across the company, but preventing the IT Director from viewing any personnel records but those that report to him. Active directory also is user friendly and only requires the users to remember a single network user name and password in order to access all applications across the enterprise. It also increases security, allows for better reporting, and centralized password support by a service desk. If this is not already an enterprise standard, it should be changed as quickly as
Andrew King
BSA/375
July 6, 2014
Dr. Todd Feuerherm
Abstract
This paper will describe the application architecture and process design that Riordan Manufacturing will use to implement their new HR system. It will provide an overview of the recommended security controls, and describe the system’s architecture in terms of data, processes, interfaces, and network.
Section 2 for Service Request SR-rm-022 – Analyze HR System Now that the system requirements are in place, the scope has been set, and the feasibility has been assessed, the application architecture and process design can begin. “Application architecture is the organizational design …show more content…
Use of Single-Sign-On (SSO) in conjunction with the enterprise Active Directory server will be the first step to securing the system. This will only allow those that have a defined HR role to access the system. Within the application multiple roles will also be defined. These roles will have different access levels and can be assigned to enterprise personnel active directory accounts as needed. (Active Directory Single Sign-on (SSO) and LDAP Integration: Okta.) Active directory implementation will allow segmentation of the HR system to only allow views into what is needed. For example allowing the HR Director access to all employee records across the company, but preventing the IT Director from viewing any personnel records but those that report to him. Active directory also is user friendly and only requires the users to remember a single network user name and password in order to access all applications across the enterprise. It also increases security, allows for better reporting, and centralized password support by a service desk. If this is not already an enterprise standard, it should be changed as quickly as