Case Study of Enterprise Resource Planning

The main aim of this report is to explain the vulnerabilities and risk within PAI organization which have implemented the security management in their business process to mitigate the risk associated with it. The study also reflects the detailed structure of how this management plan is developed and implemented within the organization. There are certain responsibility of these risk management strategies that need to be performed for mitigating the risks. It also provides a huge range of advantages to the organization.

Running Head: SECURITY MANAGEMENT AND GOVERNANCE PROGRAM
SECURITY MANAGEMENT AND GOVERNANCE PROGRAM
Name of the Student
Name of the University
Author Note

1CASE STUDY OF ENTERPRISE RESOURCE PLANNING
Executive Summary
The main aim of this report is to explain the vulnerabilities and risk within PAI organization
which have implemented the security management in their business process to mitigate the
risk associated with it. The study also reflects the detailed structure of how this management
plan is developed and implemented within the organization. There are certain responsibility
of these risk management strategies that need to be performed for mitigating the risks. It also
provides a huge range of advantages to the organization.

2CASE STUDY OF ENTERPRISE RESOURCE PLANNING
Table of Contents
PART A......................................................................................................................................2
Introduction................................................................................................................................2
Discussion..................................................................................................................................2
Benefits of security management implemented in the business process................................2
Reason for developing the policy...........................................................................................2
Development of security management plan...........................................................................3
Responsibilities of od Security management program in PAI...............................................3
Methods for development of security management...............................................................3
Implications of the legal requirements...................................................................................3
Conclusion..................................................................................................................................3

3CASE STUDY OF ENTERPRISE RESOURCE PLANNING
PART A
Introduction
Information security management system is are the set of certain protocols or policies that is
used to manage the electronic data of an organization that are sensitive. The main aim of such
system is to reduce the risk of the cyber-attack and help in smooth flowing of the business
processes (Wencui et al. 2018). Power AI is an organization that mainly deals with the
artificial intelligence system development that help in reducing the use of power, storage
purpose and also in the development of certain environment. There is a need that these
designed are kept secured they implemented the help of the Secure Security Services (SSS).
The organization consists of 50 employees. Thus they need to develop proper policies that
will reduce or diminish the risk associated with it. The organization have Artificial
Intelligence engine that is used to configure the data that is avalaibel to the organization from
the purchaser. The organization have two units that includes the sales and the support sectors.
The other units of the organization includes Finance, Account , Information technology and
the Human Resource teams (Wan and Alagar 2016).
Discussion
Benefits of security management implemented in the business process
When security management is implemented in a process it offers advantage to the
data processing and business process. There are many organizational units within the PAI
organization and the data and design that are generated from each unit need to be stored in a
secure way. If there is a loss of the legal documents within the organization that contains the
source code this can become a heavy blow to the organization. The security management will
indulge some policies within the infrastructure of the organization that will help in

4CASE STUDY OF ENTERPRISE RESOURCE PLANNING
minimizing the risk associated with it Allen, G., & Chan, T. (2017). There is huge benefits
that can be provided to the organization by providing security to the designs in that are in the
form of the organizational data. The completed products that are ready to execute are
transferred to by the use of the cloud services that allow data backups in case of any
discrepancy (Tupa, Simota and Steiner 2017).
Reason for developing the policy
The development of the design is important to eliminate the loss of the legal
documents of the organization. The main aim of developing the policy is to protect the data
from going into the hands of the competitors. They can copy the designs that are lead by the
company and it can have huge loss to the organization. There is a need of strong security by
the organization to protect the confidential designs of the organization. The algorithm that are
developed by the organization are the intellectual property of the organization which need to
be kept with proper security. The intellectual property need to be secured first. The company
made a huge investment in the development of these algorithms. These trade secrets are very
much important and thus kept secured from the hand of the attackers. The end products are
protected using the copy laws that are lead down by the government. But before that the
organization need proper management team to protect the data of the organization (Madhok,
Gupta and Grover 2016).
Development of security management plan
The development of the security plans by PAI is undertaken by creating a closed network that
are handled by the Information technology employees who belong to the internal
environment of the organization. The cloud computing services are adapted by the
organization so that the data backup and data storage are available (Allen and Chan 2017).
The security management programs will identify the risk to the data or designs of the
organization that rae very essential for the organization. To protect these assets the

5CASE STUDY OF ENTERPRISE RESOURCE PLANNING
organization will develop proper policies and documents and will implement them. Theses
management process includes analysis and management of the risk and the threats to the
organization intellectual properties.
Responsibilities of Security management program in PAI
The responsibility of the Power AI is to provide security to the designs on Artificial
Intelligence that is developed from the malicious worms attacks. They also provide risk
management and risk mitigations steps to ensure that these data are not theft by the
competitors (Ongsakul and Dieu 2016). The responsibilities of the security management
teams includes detection of the alarm of risk, analyzing the risk, managing the fraud both
from the external and the internal environment of the organization. Managing or mitigating
the risk is also a part of the program. They also introduce many legal compliances replacing
the existing so that the risk can be removed and the exposure of the organization to the
vulnerabilities of cyber-attack can be minimized. These will increase the operational flow
within the organization and will also help in increasing the cash flow within the organization.
Methods for development of security management
The methods of developing an efficient security management is to advancing the
Information System technologies within the organization. Installation of the latest version of
the windows will also help to recover data. The availability of the backup devices and
installation of the antivirus software within the systems is done for risk mitigation (Scherer
2015). There are several methods of mitigating the threats from the organization that includes
identifying the risks, identifying the existing measures that are available in the organization
and analyzing their effectiveness. The method also includes determining the risks measures
and also listing their risks according to their priorities. The last step includes a good response
for the risk (Malhotra 2015).

6CASE STUDY OF ENTERPRISE RESOURCE PLANNING
Implications of the legal requirements
All forms of the data including the intellectual property, digital , secret designs are
protected. These also reduce the risks of cyber-attack. It manages all the data from different
place within the organization by keeping it in a single place. The confidentiality and the data
integrity is also increased by the policies that are implemented by the security management
teams. The legal regulation will help the organization to mitigate the risk as the changes in
the systems, processes, chain of supply within the organization will reduce the exposure of
the organization from the risks (Biener, Eling and Wirfs 2015).
Part B
Threats
No. Name of Assets Vulnerabilities
associated with
it.
Issues Threats

7CASE STUDY OF ENTERPRISE RESOURCE PLANNING
1. Technical
resources of the
organization.
Risks from the
competitors or
the cyber
attackers within
the organization.
The competitors
can take the or
theft the data of
the organization
that are the
design
algorithms
which are the
intellectual
property of the
organization.
The risk that are
related to these
designs need to
be minimized to
protect the
organization
from severe
losses.
There can be a
huge threat to
the proper of
the
organization.
The data in the
hand of the
competitors can
be claimed as
their own and
the comp-any
will suffer
losses.
2 Human
resources of the
organization
Threat from the
external and the
internal
environment of
the organization.
The employees
who work for
the organization
as well as the
people outside
to the
The designs of
the organization
can be
published by
some other
organization

8CASE STUDY OF ENTERPRISE RESOURCE PLANNING
organization can
undertake
attempts to steal
the data of the
organization
(Simatupang
2015). The data
of the
organization can
be exploited by
the employees if
the show
disloyalty to
their
organization in
which they are
working and
leaks the designs
of the
organization.
The peoples
outside the
organization can
also hack the
data if there is
and the
organization
which have
make a huge
investment on
developing that
will be ruined.

9CASE STUDY OF ENTERPRISE RESOURCE PLANNING
no proper
security
available.
3. Technical
resources of the
organization.
Threat from the
presence of the
bugs or
malicious
worms within
the
organization
system.
If the
organization do
not have
develop proper
policies and
strong system
security the
system within
the
organization
will become
prone to bugs
or worm attack.
The data of the
organization
can be kept as
hostage which
can be a great
loss to the
organization.
There are many
attack in which
The data losses
can occur
within the
organization
and the
organization
can be dissolve
due to the
cyber attacks.

10CASE STUDY OF ENTERPRISE RESOURCE PLANNING
the
organizational
data are kept as
hostage and the
attackers
demands huge
money to
release or
giving back
data access
(Kopp,
Kaffenberger
and Jenkinson
2017). There
are some cases
in which they
do not gave the
data a
accessing
authority back
to the
organization
after paying the
money.
4. Human Lack of the The existing The cyber

11CASE STUDY OF ENTERPRISE RESOURCE PLANNING
resources of the
organization.
changes within
the legal
regularities of
the
organization.
policies for
cyber attack
crimes within
the
organization
may not be
sufficient
enough to
reduce the risk.
To replacer the
existing
policies of the
organization
with new
policies will
help the
organization to
secure its data.
So the legal
compliances
may not meet
the demand of
the security
KOVÁČ
2015).
attack can be
more prpone to
the
organization as
proper policies
are not there to
stop them.

12CASE STUDY OF ENTERPRISE RESOURCE PLANNING
Result and mitigation strategies of the risks
No. Issues that are
arising.
Implications of
strategies.
Security
management
strategies for the
issues.
1. The competitors can
take the or theft the
data of the
organization that are
the design
algorithms.
There is a need of
proper tool that will
look after the product
and services that are
offered by the
organization. The
organization provides
the support and
services that are
related to the
artificial intelligence
of the organization.
The designs can be
protected with the
use of proper tools
within the
organization. The
tools will check for
the security issues
Use of advance
software to protect
the organization from
the attacks.

13CASE STUDY OF ENTERPRISE RESOURCE PLANNING
that can be there
within the
organization
2. The employees who
work for the
organization as well
as the people outside
to the organization
can undertake
attempts to steal the
data of the
organization.
The information
systems strategies
that are there within
the organization need
to be improved and
proper security
measures need to be
adapted so that the
organization data
remains secured.
zThe employees will
aklso enjoy a hassle
free working
environment within
the organization and
the vulnerabilities
will also be reduced.
Providing proper
training to the
employees of the
organization these
type attacks can be
prevented.
3. The organization do
not have develop
proper policies and
strong system
security the system
The proper policies
against the cyber
security issues within
the organization will
help to reduce the
The existing policies
of the organization
need to be replaced
with new and
advanced policies to

14CASE STUDY OF ENTERPRISE RESOURCE PLANNING
within the
organization.
risks of the attacks.
The implementation
of the policies will
increase the security
program within the
organization.
reduce the attacks.
4. Threat from the
presence of the bugs
or malicious worms
within the
organization system.
The threat from the
attacks within the
organization that
includes the Denial
of Service attack or
the ransomware
attack that keep the
electronic data of the
organization as
hostage can be
reduced with the help
of backup devices
and effective routers
and switches. There
is a need of installing
anti virus software
that can protect the
system of the
organization
Installing secured
server of Windows
and implementing
advances routers,
Use of protected
storage device will
reduce the risk.

15CASE STUDY OF ENTERPRISE RESOURCE PLANNING
(Boronat-Soler
2018).
Solutions for the issues.
Installation of the advanced windo server
Categories Reason to
implement the
policy
Product used Product used
Up gradation of the
security
The weakness of the
organization related
to the security issues
can be prevented if
the software parts
can be repaired
according to the
requirements of the
organization by the
manufacturer.
Windows-server
2008 R2
It cannot be utilize
for updating the
windows-2016
Window
defender provides
protection
A pre installed
software that provide
security is present.
A partial support is
provided by it
A complete support
is provided by it.
The threat can be
diminished.
.The activities that
are malicious can be
detected by the
system
A partial support is
provided by it
A complete support
is provided by it.

16CASE STUDY OF ENTERPRISE RESOURCE PLANNING
automatically
(Radanliev et al,
2019).
Cost of the
procurement
For obtaining the
server a cost need to
be met.
AUD 2210.00 AUD 8639.93
Hardware parts
costs
The hardware parts
are needed for the
installation
AUD 59.36 AUD 1216.40
Total of the costs AUD 2269.36 AUD 9856.33
2. Installation of anti-virus
Categorization Reasons ESET NOD32
Antivirus.
Webroot Secure
Anywhere
Antivirus.
Real-time security Malware protection
at the time of need
Provided Provided
Phishing scams can
be diminished
Spam protection by
providing filtering
option
Provided Provided
Protection of
identities
Protection of the data
from theft.
Provided Provided
Cost of procurement AUD 56.93 AUD 41.65

17CASE STUDY OF ENTERPRISE RESOURCE PLANNING
Total cost AUD 56.93 AUD 41.65
Table 3 backup Devices
Categorization Reasons QNAP TS-251A
NAS drive.
WD
My Cloud Personal
NAS drive
Friendly to the users Use of the devices Easy to use Simple use
Storage capacity Data storage capacity 4TB 6TB
Speed of the backups The time that need to
one the backups.
Backup is provided
quickly.
Backup is not good
Costs of procurement The wireless router
purchasing costs
AUD 648.12
(Merisalo, 2018).
AUD 199.34 (Lanka
& Garzevas, 2018)
Cost of service Installation and fees
of the merchants
AUD 980 AUD 139.44
Total costs AUD 1627.12 AUD 338.78

18CASE STUDY OF ENTERPRISE RESOURCE PLANNING
References
Allen, G. and Chan, T., 2017. Artificial intelligence and national security. Cambridge, MA:
Belfer Center for Science and International Affairs.
Biener, C., Eling, M. and Wirfs, J.H., 2015. Insurability of cyber risk: An empirical
analysis. The Geneva Papers on Risk and Insurance-Issues and Practice, 40(1), pp.131-158.
Boronat-Soler, T., 2018. Which are the leading journals in Human Resources Management
and Operations Management in the Web of Science and Scopus databases? Design and
application of a classification method. WPOM-Working Papers on Operations
Management, 9(2), pp.127-181.
Kopp, E., Kaffenberger, L. and Jenkinson, N., 2017. Cyber Risk, Market Failures, and
Financial Stability. International Monetary Fund.
KOVÁČ, S., 2015. Zavedení systému řízení informační bezpečnosti dle ISO/IEC 27001 v
praxi (Doctoral dissertation, Masarykova univerzita, Fakulta informatiky).
Lanka, A., & Garzevas, A. (2018, April). Remotely Accessible, Low Power Network
Attached Storage Device. In 2018 Second International Conference on Inventive
Communication and Computational Technologies (ICICCT) (pp. 1083-1088). IEEE.
Madhok, E., Gupta, A. and Grover, N., 2016. Artificial Intelligence Impact on Cyber
Security. IITM Journal of Management and IT, 7(1), pp.100-107.
Malhotra, Y., 2015. Cybersecurity & Cyber-Finance Risk Management: Strategies, Tactics,
Operations, &, Intelligence: Enterprise Risk Management to Model Risk Management:
Understanding Vulnerabilities, Threats, & Risk Mitigation (Presentation Slides).
Merisalo, T. (2018). Windows-palvelimen hyödyntäminen kotiympäristössä.

19CASE STUDY OF ENTERPRISE RESOURCE PLANNING
Ongsakul, W. and Dieu, V.N., 2016. Artificial intelligence in power system optimization. Crc
Press.
Radanliev, P., De Roure, D.C., Nurse, J.R., Burnap, P., Anthi, E., Uchenna, A., Santos, O.
and Montalvo, R.M., 2019. Cyber Risk Management for the Internet of Things.
Scherer, M.U., 2015. Regulating artificial intelligence systems: Risks, challenges,
competencies, and strategies. Harv. JL & Tech., 29, p.353.
Simatupang, A.I., 2015. State Responsibility over Safety and Security on Air Navigation of
Civil Aviation in International Law. Indonesian J. Int'l L., 13, p.275.
Tupa, J., Simota, J. and Steiner, F., 2017. Aspects of risk management implementation for
Industry 4.0. Procedia Manufacturing, 11, pp.1223-1230.
Wan, K. and Alagar, V., 2016, August. Characteristics and classification of big data in health
care sector. In 2016 12th International Conference on Natural Computation, Fuzzy Systems
and Knowledge Discovery (ICNC-FSKD) (pp. 1439-1446). IEEE.
Wencui, L., Yan, L., Shiwen, W., Xiong, L., Xinjian, S. and Fangfang, D., 2019, April. An
information security prevention system of power grid enterprises based on artificial
intelligence. In 2018 IEEE International Conference of Safety Produce Informatization
(IICSPI) (pp. 148-152). IEEE.