who work for that organisation. Technical security is often only defeated by insider help. Corporate victims of such criminality do not want the negative publicity that comes with such rogue activity and so secrecy and discretion is vital when investigating such thefts or suspected thefts. This is where the specialist private investigation company called Corporate Security Services (CSS) comes in. Quietly, efficiently and discretely, CSS will investigate all aspects of a suspected corporate theft and those staff who are suspected of committing it. The company investigate all types of theft and fraud, whether it be direct stealing of cash, cheques or other financial documents; unauthorized removal of sensitive digital data via portable devices; on-site unauthorized access to corporate databases; remote hacking into corporate databases and websites; any other type of illegal activity or activity deemed to break corporate good-practice or policies. In order not to tip-off suspected staff, CSS do much of their investigation remotely supported by senior management at the client or if on-premise searches or staff interviews are needed, they are conducted outside of normal business hours. Each investigation becomes a project so a given client organisation may be paying CSS to run several different projects in parallel at the same location or at different locations. Obviously, CSS have many corporate clients at any one time. Each project will be assigned a team of CSS investigators which normally includes: An ex-police officer (who handles all evidence-gathering issues) A lawyer (who handles all legal issues) An IT expert (who handles on-premise and remote access issues) An accountant or auditor (who handles the forensic accounting issues) A logistics & project manager specialist (who resources/organizes the project) The project manager will be the contact point for the external client and will liaise daily with them and the CSS HQ, who can supply additional expertise and resources as needed. The project manager will also be responsible for dealing with third-party agencies such as the police, court system, specialist technical agencies such as internet service providers, social media platforms, locksmiths etc. Final Point The organisation needs a database to run all the above operations. Your job is to design and build this database. The above is simply an outline of the company and you will need to make your own assumptions and interpret or even extend the scenario as you go. Use your imagination as you see fit, but you must clearly document all assumptions and extensions. The specific tasks you need to satisfy are listed below

(a) Summarize the key benefits that the database approach to data management offers over traditional file-based data management. Answer with regards to this case study. (5 Marks)

(b) List and briefly describe the major features to be found in a commercial database management system (DBMS).