This document discusses security controls and physical data flow diagrams for Riordan Manufacturing's information systems. It recommends securing all company data through encryption and passwords. Critical employee and tax records should require passwords to access. A virtual local area network accessible with username and password could allow basic employee information updates. More detailed records would require additional authentication. Physical data flow diagrams should show implementation details to maintain clear and proper system design.

1. -Running head: RIORDAN MANUFACTURING SR-22 -2 Part 1
Riordan Manufacturing SR-22 2 Part
Reinaldo Burgos
BSA375
December 09, 2012
Ilka Kawashita

2. RIORDAN MANUFACTURING SR 22- 2 Part 2
Riordan Manufacturing Service Request 22 2 Part
After theprevious meeting we discussed many important subjects that required additional
research to present the safe way to process the transitions of new changes. Alsowe had reviewed
different data flow that will work in the best of improve the proper handling between Riordan
Manufacturing and the plants related to ensure the best relation between each department. It will
improve the communication in Riordan and save money and time after the final implementation.
Security Controls
Security should be a high level of concern in any project. "Security is primarily the
responsibility of the operations group, which consist of the staff responsible for installing and
operating security controls such as firewalls, intrusion detection systems, and routine backup and
recovery operations" (Dennis, Wixom, & Roth, 2009). However, system developers also have a
responsibility when it comes to security; especially within the information systems.
Data: All data must be kept secure and confidential. Any company data including company
policies and procedures, as well as, employee data containing employment information will be
held responsible under Riordan Manufacturing. Any forms of data that belong to the company
are proprietary; therefore, data encryption and passwords will be utilized to allow authorization
to access the data. If any form of data were to be intercepted into the wrong hands, this can be
detrimental to the organization. “Lawsuits alone would easily exceed $10 million and the cost of
staff to find and reenter paper records would be enormous and certainly would take more than a
few weeks" (Dennis, Wixom, & Roth, 2009).

3. RIORDAN MANUFACTURING SR 22- 2 Part 3
Processes:Some processes, such as the application process would benefit from using
third-party software. This will allow Riordan Manufacturing to have the security guarantee from
the third-party vendor. Using COTS will allow Riordan Manufacturing to save time because
programs are already developed and can get some training and services included in them, and it
will be a long term investment that will also save money. For any additional program or software
that need to cover special projects can be consider an in-house development.
Interfaces: "Interface design is the process of defining how the system will interact with
external entities e.g., customers, suppliers, other systems" (Dennis, Wixom, & Roth, 2009).
System interfaces are also capable of exchanging information with other systems andtherefore
require a high level of security. This security can be achieved by incorporating password
requirements to unlock confidential and private documents, such as employee files and company
tax records. This would help prevent internal security threats of employees attempting to access
another employee's computer.
Network:One recommendation is to incorporate a company-widedatabase, accessible
only via a virtual local area network (VLAN), which allows employees to view and update some
basic level information that would be subject to verification by a payroll clerk or supervisor.
Such access will required security protection thru the use of username and password. To obtain
more detailed informationit will required an authorized payroll clerk or supervisor. At the same
time, to obtain that information is important to provide three-factor authentication method: such
as username with password and a fingerprint scan to obtain those highly confidential records. In
addition, the third-party organizations that administer Riordan employee’s benefits such as their

4. RIORDAN MANUFACTURING SR 22- 2 Part 4
health benefits and workers compensation should be audited on a yearly basis for accuracy and
competitiveness. It will ensure the utilization of the most accurate processes within
theorganization.
Physical Data Flow Diagrams
While designing the application logic of the information system, the implementation
decisions describing how the system will work. Physical data flow diagrams show these
implementation details, including “data stores that refer to files and database tables, programs or
human actions that perform processes, and the physical transfer media for the data flows”
(Dennis, Wixom, & Roth, 2009). Maintaining a clear and proper implementation it will provide
the service expected with the simple and clear results.(TIBCO Software Inc., 2001)

5. RIORDAN MANUFACTURING SR 22- 2 Part 5
After this process there will be a new meeting next week to discuss any additional
information about the process and implementation of final changes. Riordan is seeking to resolve
those issues in the short time as possible and we will ensure to satisfy all the needs in the safe
and secure process.

6. RIORDAN MANUFACTURING SR 22- 2 Part 6
References
Apollo Group, Inc. (2012). Virtual Organization Portal: Riordan Manufacturing. Retrieved from
https://ecampus.phoenix.edu/secure/aapd/cist/vop/Business/Riordan/index.asp
Dennis, A., Wixom, B. H., & Ruth, R. M. (2012).Systems Analysis and Design (5th ed.).
Retrieved from the University of Phoenix eBook Collection database.
Khosrowpour, M. (1999). Managing information technology resources in organizations in the
next millennium. Idea Group Inc (IGI).
Riordan Manufacturing. (2012). Retrived July 28, 2012, from
https://ecampus.phoenix.edu/secure/aapd/cist/vop/Business/Riordan/index.asp
TIBCO Software Inc. (2001). Business process. (pp. 10-15). Palo Alto, CA: Global
Headquarters. Retrieved from http://www.tibco.com/multimedia/business-process-
design_tcm8-2399.pdf