Security and Privacy Risk Assessment for DAS Management Presentation

This presentation provides a comprehensive risk assessment of security and privacy concerns for the Department of Administrative Services (DAS), focusing on the use of SaaS applications, specifically BambooHR. It explores the implications of security and privacy breaches, the sensitivity of data, and issues related to data sovereignty. The assessment examines the challenges faced by HR departments, the operational solutions offered by BambooHR, and the impact of operational location on data security. The presentation also identifies various threats to employee data and discusses mitigation strategies. Furthermore, it addresses the privacy implications of data management, data sensitivity, and the importance of trade secrets. The analysis covers data sovereignty issues within DAS and concludes with recommendations for mitigating identified risks, including alerting and metrics, centralized logging, redundancy, firewalls, backups, 2-factor authentication, and security awareness programs. The presentation aims to provide a clear understanding of the risks and potential solutions for managing data security and privacy within DAS.

DAS
MANAGEMENT
SECURITY AND PRIVACY RISK ASSESSMENT
FOR DAS

Introduction
• The presentation is on Department of Administrative Service
• It is discussed about the risk assessment of privacy and security
assessment
• The selected software used is BambooHR
• BambooHR uses SaaS software

Introduction
• Implications related to security are discussed
• Implications related to privacy are also discussed
• Sensitivity of data are discussed in the presentation
• Issues which are related to sovereignty are also discussed
• In the end a conclusion is drawn in the presentation

DAS Management
A department of Australian government which deals with:
• Valuation service
• Transport service (Metraux et al., 2016).
• Disposal of goods
• Storage service

SaaS application - BambooHR
• BambooHR is a SaaS application
• It provides solution regarding HR department (Cherinka & Prezzama,
2015).
• Perform task with focus
• Perform task with security

Problem faced by HR
• Increase in data redundancy
• Complexity increases for HR (Omran & Anan, 2019).
• Makes harder to navigate

Operation by BambooHR
• Handles numerous solution related to operation
• Helps to perform HR activity in compact way
• Helps to increase the agility of organisation
• Helps to increase efficiency of organisation

Managing security posture of
DAS
By using the software of operational solution the data of
DAS can be managed. The software provide:
• Role-based access
• Data encryption
This provides security in DAS

Operational location of
BambooHR
• Provides current location
• Gives update in location change
The application provides enough support by proving the
current location of the data which is very important

Affect of operational location on
DAS
• Provide support to the HR department of the organisation
• Get access of the current location
• Gets update for the change in location
• Increase security of data
• Security perspective increase in DAS

Reason for threat on employee
data
Various type of threat include:
• Phishing
• Weak password
• Disability of security control
• Unauthorised installation

Effect on DAS due to the threat
• Loss of data
• Effect on reputation of the organisation
• HR department failure
• Security loss of organisation