Case study scenario Central Medical Supplies

Case study scenario: Central Medical Supplies

Central Medical Supplies (CMS) is a company that designs and manufactures specialised electronic and mechanical equipment for Medical use. They sell their products to specialist retailers and through their own branch offices. Some of the products they manufacture must be installed by specialist technicians. CMS branch offices have trained service professionals and training staff. Some common items are kept in stock at the branch locations, but most products are shipped to branches on an as needed basis due to the customization required to match different installations. An online portal allows branches and retailers to order equipment and arrange installation dates, time, and location.

A key part of CMS is the design and testing of their products. Care must be taken with products in development that the information is retained within the company and laws relating to copyright (e.g. software for electronic equipment), patents and trade secrets as well as not releasing important commercial information (eg product release dates and quantities). Design and development is all performed at the main branch in Melbourne.

The Main Branch in Melbourne has three main divisions Research, Design and Development, Manufacturing, Sales and Installation. Support departments include Finance, Payroll, and Accounts, ICT, and Human Resources. Support and oversight for branches is largely provided by the relevant areas of the business. hosting the main servers and applications, manufacturing products, contracting with suppliers. The Melbourne Branch has 100 employees.

There is a sales branch in each state and territory. Branches in NSW, VIC, WA have about 20 employees consisting of 5 installers, 3 general installation assistants, a branch manager, an ICT assistant, an installation manager, an accounts manager, a sales and training staff, and several other personnel. SA, TAS and NT branches are smaller, with approximately 1/3 of the staffing.

Products final assembly and set up occurs in Melbourne. Most of the components for final products are manufactured by subcontractors located in Australia as well as overseas.

Research and development use specialist applications for developing products. This includes applications including software development tools and hardware design applications. The Sales and Installation main application is AllAccounts Software. It provides for sales of products, invoicing and accepting payments of clients, scheduling of installations, and finalising sales and installation accounts. Stock control (purchasing and inventory maintenance) also has its own application and tracks products from purchase through to installation. The customer online webpages are hosted by an outside provider which interacts with the AllAccounts software though an internet link. Payroll is handled by a separate system: MyPayrol which runs on a server at the main branch office. All branches can interact with these major systems through the internet. CMS uses many other common application programs: email, word processing, spreadsheets, etc. ICT has the responsibility of organising and implementing the network, server and computing facilities as well as maintaining the applications in use in the Melbourne Branch as well as the Sales Branches.

CMS has only recently identified a need for a more formal approach to securing their ICT systems, though there are currently some elements implemented in an ad hoc fashion (firewalls, virus and malware protection, user access controls which are overseen by the ICT technical staff.

CMS have contracted your consulting service, Secure Security Services (SSS), to provide a report outlining the need for a Security Management Program, its purpose, and a suggested framework for the development of a security management program that oversees security concerns across their business.

As an employee of SSS, you have been asked to develop a report that presents the needs and requirements to implement an ICT Security Program for CMS. This plan should discuss how information security could be better managed by developing a Security Management Program and provide an overview of how to develop such a program. This would include identifying the tasks and roles that need to be assigned for the development and implementation of a Security Management Program.

CMS has two major organizational units that relate directly to their products: Research and Development, Sales and Service and Support. Other vital parts of CMS’s business structure are Finance and Accounts, IT Services and Human Resources. Though most of the employee positions are stable, the turnover of employees in the ICT Unit is high because of the large demand for IT employees with detailed knowledge of ICT systems.

Posted in Uncategorized

Leave a Reply