Department of Administrative Services: MyLicense Portal Case Study

This case study focuses on the data security challenges faced by the MyLicense portal, operated by the Department of Administrative Services. It identifies several key risks, including malware infections, cybercrime, government intrusion, data migration issues, and data leakage. The study highlights how malware can facilitate targeted attacks, the vulnerability of the portal to cybercriminals, and the potential for data breaches due to government access. Furthermore, it addresses the risks associated with data migration and inadequate data protection strategies. The case study emphasizes the importance of robust security measures to safeguard Personally Identifiable Information (PII) within the portal, referencing various research papers to support its findings.

Running head: CASE STUDY: DEPARTMENT OF ADMINISTRATIVE SERVICES
Case Study- Department of Administrative Services
Name of the Student
Name of the University
Author’s Note

2
CASE STUDY: DEPARTMENT OF ADMINISTRATIVE SERVICES
Part1 : Develop a threat and risk assessment for PII data for the MyLicence
portal
It is identified that there are number of risks as well as challenges which are associated
with personal identifiable information for the MyLicense portal. The risks as well as challenges
include:
Malware infection that helps in unleashing targeted attack: It is identified that due to
malware infection in the portal of MyLicense the personal identifiable information get affected
as it is found that malware infections assist in unleashing the targeted attack (Juels & Oprea,
2013). The malware are delivered by the cybercriminals by using the file sharing method.
Cybercrime: It is identified that personal identifiable information that are stored within
the portal can face security as well as data protection issues as well as challenges as cybercrime
generally encompasses hacking, phishing, unauthorized data access as well as interception of
various significant data of various departments as well a their associated users.
Government intrusion: As the government wants to achieve proper view of the licenses
that are hold by the citizens, the government generally links data that are hold by the citizens and
as a result the chances of data breaches of personal identifiable information from the portal
enhances (Haimes et al., 2015).
Migration of data: In order to get the facility of various services, the departments or the
agencies need to migrate it data to DAS so that it can be easily consolidated into the centralized
database of DAS (Hashem et al., 2015). It is identified that due to migration of data the chances
of data leakage enhances and as a result personally identifiable information that is present in the
portal of MyLicense can be at risk.

3
CASE STUDY: DEPARTMENT OF ADMINISTRATIVE SERVICES
Data Leakage: Data leakage is one of the problems that can be faced by MyLicense
portal. The personal identifiable information that is stored within the portal can be viewed or
potentially at risk due to number of reasons including malicious hacking as well as due to
insufficient data protection steps taken by the portal (Latif et al., 2014).
Improper protection strategies for data: The departments of administrative services do
not take appropriate measures or strategies that are helpful in protecting the data of the people
that are stored in order to renew licenses of the services.

4
CASE STUDY: DEPARTMENT OF ADMINISTRATIVE SERVICES
References
Haimes, Y. Y., Horowitz, B. M., Guo, Z., Andrijcic, E., & Bogdanor, J. (2015). Assessing
Systemic Risk to Cloud‐Computing Technology as Complex Interconnected Systems of
Systems. Systems Engineering, 18(3), 284-299.
Hashem, I. A. T., Yaqoob, I., Anuar, N. B., Mokhtar, S., Gani, A., & Khan, S. U. (2015). The
rise of “big data” on cloud computing: Review and open research issues. Information
Systems, 47, 98-115.
Juels, A., & Oprea, A. (2013). New approaches to security and availability for cloud
data. Communications of the ACM, 56(2), 64-73.
Latif, R., Abbas, H., Assar, S., & Ali, Q. (2014). Cloud computing risk assessment: a systematic
literature review. In Future Information Technology (pp. 285-295). Springer, Berlin,
Heidelberg.