Customer Privacy Protection

Select an organization with which you are familiar or regularly do business, such as a retailer, online business, pharmacy chain, medical facility, supermarket, wholesale retailer, etc. You may select the organization you work for as long as no sensitive or proprietary information is made public.

You have been appointed the CIO of the organization you selected in Module 1. Your job is to analyze the “as is” state of the organization’s information system and recommend changes wherever you see fit. Analyses and recommended changes will be done based on concepts learned throughout the course. You have already submitted two milestones in previous modules:

• Milestone 1: Organization Proposal (Module 1)
• Milestone 2: Business Model, SCM, and CRM (Module 4)
  • Organization’s business model (market share, customer base, revenue, competitors)
  • SCM
  • CRM

In this module you will complete Milestone 3 and compile all milestones into your final Portfolio Project.

Milestone 3: eCommerce, Database Systems, Security Policies, Customer Privacy Protection, Business Continuity Planning, and Recommendations

To complete your Portfolio Project, analyze the organization you selected based on the following areas and provide detailed recommendations.

1. eCommerce presence
   1. What model they utilize?
   2. Are they utilizing mCommerce? If yes, explain. If not, explain why they would benefit from it.
2. Database systems utilized
3. Security policies
4. Customer privacy protection
5. Business continuity planning
   1. Briefly describe how continuity planning has prepared the business to deal with the following threats: internal threats, theft, unintentional or intentional data corruption, staff-related issues (strikes, illnesses, weather related, etc.), natural disasters, infrastructure failures, terrorist attacks. (Consider the four planning steps recommended by the Department of Homeland Security when analyzing the business continuity planning for the organization.)
   2. Identify gaps that require further attention by the organization.
6. Recommendations
   1. System development method: What system development method would you recommend and why?
   2. Off-the-shelf vs. custom software: Describe what would be the advantages and disadvantages of utilizing off-the-shelf software versus building customized software, considering your organization’s needs, and recommend the one you think would be more feasible.
   3. New technology: Recommend at least one new technology the organization is not using that you think might benefit them. Describe how that technology works. If that new technology was to replace an existing technology or system, what cutover approach would you recommend and why?