INF30020 Information Systems Risk & Security
1. OVERVIEW. AE Kalina Cycle (AEKC)
specialises in the production, installation and maintenance of electricity from waste heat. This is an alternate energy solution for factories in the Australian commercial market. AEKC was established in 2000 just outside Wollongong, New South Wales and although a lot of the region is prone to flooding, this idyllic south coast city remains company headquarters today. Company founders, Peter Williams and John Damon, met while studying Business Information Systems and Engineering at Swinburne University of Technology, however a love of surfing took them to southern NSW where they could ride waves the whole year around. Together they developed the technology (AEKC) for alternate energy through use of waste heat produced in bottling factories, petrochemical plants and cement factories. They have extended this technology to using thermal springs as another source of waste heat. The technology uses inverters (to feed electricity back into the main for these factories and plants. A monitoring system continuously tracks performance and efficiency. Kalina Cycle is a patented technology that requires two patented hardware and software devices (the inverter and the monitor) that are installed alongside the factory electricity meter boxes when customers first buy the technology. AEKC’s unique inverter converts waste water mixed with ammonia into required AC electricity currents at levels of efficiency that cannot be matched by any of the usual energy utility companies. By monitoring usage AEKC can present customers with reports that they can use to optimise their consumption and make cost savings. They can also feed any electricity they create back into the local grid. A connector interfaces with the meter box to feed data, via the Internet, back to AEKC’s data centre. Commercial customers can access reports on any networked device including PC’s, smartphones and tablets. The system reports commercial electricity generation to the electricity supplier that is critical for accurate rebates to be paid from the supplier to the customer. AEKC’s high performing inversion and monitoring solution has made it Australia’s most successful company in its field with a reputation that it needs to be protected.
2. MOBILE SUBBIES AND AN EXPANDING MARKET.
While Peter and John are still the company’s chiefs, by 2005 they had employed six engineers to build and test prototype systems before updating and assembling the final product. Also in 2005, AEKC was incorporated to limit the financial liability of its founders and manage the legal responsibilities of the company, e.g. as this company earns more than 3 million per annum it is bound by the NPP and Australian Privacy legislation. Changes have been swift, components such as the casing, sensors and electronic parts for the final product were initially sourced in Australia, but in 2006 AEKC shifted manufacturing and basic assembly of the system to Guangdong, China. While domestically licensed sub‐ contractors can complete distribution and installation of the technology to customers. AEKC head office continues to manage AEKC’s monitoring and reporting systems centrally, at the AEKC data centre, on behalf of its licensed ‘subbies’ and in addition to charging the ‘subbies’ for their license and products, it also charges a service fee to customers for the reporting system. Peter and John decided early on that they did not wish to develop the installation side of the business but recognised the value in retaining the technological advantage and income stream generated by the AEKC intelligence system. They now focus on research, development and innovation
INF30020 Information Systems Risk & Security Case Study –
S2, 2017. company built AEKC’s enterprise system, enterAEKC, almost 15 years ago, but the company no longer exists. Keeping up with changing business demands has required AEKC’s IT department to develop “patches, extensions and workarounds” just to keep enterAEKC running. Rapid development means detailed documentation about the system was put to one side and changes made to the system have been dependent on a dedicated Database Administrator and programmer to keep it operating. enterAEKC is becoming a problem for the business, the Accounts reconciliation officer responsible for banking,
Tracy Bell, exports and converts data daily, in CSV format, so that she can reconcile accounts and complete banking from ledgers on her own desktop. While she has been asked not to do this work from her laptop, her busy schedule sometimes demands this. Complicating matters, it is not possible to share customer transaction records between enterAEKC and the data centre in real‐time, instead this customer information is processed in a nightly batch process. While AEKC has established a secure extranet and VPN for its sub‐contractors, agents and suppliers that allows them to communicate billing and procurement records, IT is constantly having to undertake additional work and activate new scripts for processing the information received through the ‘partner portal’ just so it can be included in the enterprise system. The problems with enterAEKC have been flagged with the Board of Directors, however they are somewhat ignorant about enterprise systems and see the problem principally as an “IT issue.” They “just want it fixed”, Without an IS/IT manager reporting directly to the Board they remain unaware of any broader implications, issues or opportunities in this space. Recently, their attention has been focussed on the company’s new state‐of ‐the‐art data centre.
4. NEW PRODUCTS AND SERVICES.
At the beginning of this year, AEKC decommissioned its original customer data management servers and opened a new AEKC Data Warehouse on the outskirts of Wollongong that will serve as a platform for new products and services. aeKC Data Warehouse: The data warehouse has taken over data management for the aeKC customer monitoring and reporting system and is being prepared to support and drive multiple aspects of the company’s future directions. The amount of data that is exchanged and shared about customer energy generation and use via aeKC has grown exponentially over the last 15 years and maintenance of the reporting system for customers have remained a core activity of the business. For customers, the data warehouse promises faster real‐time processing of their accounts and user friendly reports about energy consumption with a dynamic reporting interface that allows them to undertake analysis and forecasting of use on multiple devices and through their social media accounts, including Facebook and Twitter. In addition to extending the operating capacity of aeKC (itself a major revenue stream for AEKC), the resource presents a significant opportunity for ‘big data analysis’ that will support business intelligence and, at this stage; it is an opportunity that cannot be matched by AEKCs competitors.
AEKC is exploring licensing options for the resale of its data to government, alternate energy suppliers and other interested businesses both domestically and internationally. However much of this will depend on the centres capacity to interact securely with customers over Wi‐Fi and mobile networks. To support this the centre has implemented a continuous uninterruptible power supply and its own continuous backup facility. It is linked to the outside with high‐speed broadband connections.
INF30020 Information Systems Risk & Security Case Study –
S2, 2017. installers; customers under license with the installers and subscribers to the AEKC reporting systems; project data; design specifications, logistics and supply chain data) is done on a monthly basis. A small specialist company, located in Nowra (a small town near Wollongong) provides the data backup service. The company is owned by a close and trusted friend of Paul and although it is a relatively new company, so far it has made good on its promise to provide an "excellent and reliable service to secure all corporate data and information" and "provide cost effective solutions to corporate data backup and restoration". The company has immaculate offices and presents an impressive looking backup facility as per the information provided in their web page, and (per its website) it has a significant bandwidth leased from an ISP that ensures all backup processes can be performed offsite.
5. OF IMMINENT CONCERN.
Business prospects seem healthy for AEKC, yet it is easy to see that the corporate culture of this south coast company is not what its two surf‐loving founders first imagined. Several incidents in the past few months are compounding the already existing tensions and operational issues that surround the overburdened and aging enterprise system. Recently, employees who have been with the company for its first 15 years, including its Chief Engineer have left and a lot of corporate know‐how has departed with them. Nobody is sure why Alwyn Burn chose the suppliers that he did, but a recent review suggests that it may not have been based solely on the competitive tender process. Other departing employees seem jaded following the pressures of the past few years. Between 2013‐2016, there has been a substantial rise in the number of viruses detected in email attachments scanned by the IT department and IT recently identified a targeted phishing attack designed to convince finance personnel to release account details to an unknown
party. After careful examination of the emails it’s clear that this was the result of a scam designed to access corporate account details, but by whom? Paul is concerned that corporate espionage or company fraud may be just as real a threat at AEKC as the malicious activity of organised criminal hackers outside of the company. Even the weather is affecting the mood. Rain on the NSW south coast over the past 2 months has been interminable and surf conditions have been appalling. There are concerns that the Shoalhaven River may eventually peak at levels higher than the last recorded 100‐year flood. AEKC seeks your advice in the management of its Information Systems risks and security. ‐‐
marketing assignment, marketing management assignment, marketing management assignment help, digital marketing assignment help, marketing assignment help online, marketing homework help, marketing assignment writing, online marketing assignment help, strategic marketing assignment help, online marketing assignment, marketing assignment writing service, international marketing assignment help, marketing mix assignment help, marketing homework assignment