M$10$: Case Study $-$ Bob's Home Repair Part $3$

Bob has decided to increase the ease of use of the database while he is out doing bids on potential jobs. His

business's home repair database needs to be accessible on employees' smart phones and tablets via a mobile

friendly website. The website will provide several menus and dialog boxes to allow users to query and update the

database.

Bob stopped you in the breakroom and asked you if there are any security requirements that should be

considered as part of the requirements which will be used to contract out development of the website and

database connection. You told him that yes, there were several very important items that needed to be included in

the requirements. Bob tells you he isn't sure he wants to spend the additional money that security will no doubt

add. You are just about to list your concerns when Bob says he needs to run off to a meeting with a vendor but

asks you to put together a short document describing the issues you are concerned about. If you make a strong

case, he will increase the project budget.

Using the materials from Modules $8$ & $9$ as a guide, write a paper for Bob, only $1-2$ pages in length, which

describes common vulnerabilities in databases, the impact they can have to business operations, and what types

of security controls and prevention measures should be put in place to ensure the confidentiality, authentication,

authorization, and Integrity of the database. Bob is a great home builder but he's not a cybersecurity professional

like you so you will need to write this paper in a specific, but non$-$technical manner.