Case Study: Security Risks and Mitigation for MyLicence Portal

This case study examines the security risks associated with the MyLicence portal and proposes several mitigation strategies to enhance data protection. The analysis identifies potential vulnerabilities and threats, focusing on the need for limited access, regular data backups, robust encryption, and thorough security testing. The study highlights the importance of implementing strong encryption plans to safeguard sensitive information and the value of ethical hacking to identify and address potential security flaws. Furthermore, the case emphasizes the significance of risk assessment and the adoption of proactive measures to ensure the portal's security. By implementing these strategies, the Department of Administrative Services can minimize the chances of security breaches and protect user data. The case study uses references to support the findings.

Running head: CASE STUDY: DEPARTMENT OF ADMINISTRATIVE SERVICES
Case Study- Department of Administrative Services
Name of the Student
Name of the University
Author’s Note

1
CASE STUDY: DEPARTMENT OF ADMINISTRATIVE SERVICES
Part 2: Develop a PII strategy proposal for the DAS MyLicence portal
It is identified that there are number of security as well as protection risks that can be
occurred within the portal of MyLicence. In order to mitigate or resolve the issues, numbers of
strategies as well as methods are utilized which includes:
Providing limited access: The department of administration must provide limited access
of the portal so that only users or the people who wants to renew the license must used the portal
(Brender & Markov, 2013). Unauthorized access of the portal must be avoided in order to
minimize the chances of security as well as protection risk on personal identifiable information
lowers.
Backing up sensitive files: While sharing data for consolidating with the database of
DAS for getting services, it is very much important for the government department as well as
agencies to utilize some of the external devices (Almorsy, Grundy & Muller, 2016). By backing
files both physically as well as virtually one can provide proper guarantees to the users that even
at the time of attacks or crashes the form will have access of the data.
Implementing strong encryption plan: The portal “MyLicense” stores important as
well as significant information within the portal and therefore in order to mitigate security issues
it is very much important to implement proper encryption plan (Hashizume et al., 2013) It is
analyzed that proper use of encryption software are quite important for keeping the information
secure.
Testing security measures: It is quite important to test the security measures of the
portal instead of assuming that all the files that are present on the portal are fully secure (Furuncu

2
CASE STUDY: DEPARTMENT OF ADMINISTRATIVE SERVICES
& Sogukpinar, 2015). Ethical certified hackers can be hired by the department of administration
in order to test the portal in context to security.

3
CASE STUDY: DEPARTMENT OF ADMINISTRATIVE SERVICES
References
Almorsy, M., Grundy, J., & Müller, I. (2016). An analysis of the cloud computing security
problem. arXiv preprint arXiv:1609.01107.
Brender, N., & Markov, I. (2013). Risk perception and risk management in cloud computing:
Results from a case study of Swiss companies. International journal of information
management, 33(5), 726-733.
Furuncu, E., & Sogukpinar, I. (2015). Scalable risk assessment method for cloud computing
using game theory (CCRAM). Computer Standards & Interfaces, 38, 44-50.
Hashizume, K., Rosado, D. G., Fernández-Medina, E., & Fernandez, E. B. (2013). An analysis of
security issues for cloud computing. Journal of Internet Services and Applications, 4(1),
5.