Riordan Manufacturing HRIS: System Design & Security

Introduction

Riordan Manufacturing is an organization that produces plastic injection moldings. Its management has decided to take advantage of state-of-the-art technology to combine a variety of tools into a single application by developing a Human Resources Information System (HRIS). To implement the system effectively, the organization needs to develop a clear application architecture, process design, and security framework. This paper discusses the system design and security considerations for the Riordan HRIS.

Process Design and Application Architecture

A web-based application will be used for development, based on the benefits the HR department will derive from it. One key benefit of a web application is availability: it can be accessed via the internet by multiple users simultaneously. The design employs a three-tier architecture, which includes a network server, a web client, and a backend information system to support the database.

The paper designs a relational database that incorporates both a process model and a data model. The data model describes the structure of the database, while the process model defines the queries used to perform operations. In the entity-relationship notation, a rectangle represents entities and a diamond represents a relationship between two or more entities. Figure 1 provides the Data Flow Diagram (DFD) for the database. A DFD is a graphical illustration that shows the data stores, processes, and external entities connected by data flows within the system.

The process model reveals the overall functionality of the information system. The DFD is an effective tool for analyzing information systems and the data transfer process. It also assists in constructing, testing, and implementing processes effectively. Figure 2 illustrates the authentication process within the DFD.

Security of the Information Systems

Security is the practice of protecting information systems from data loss and disruption. Data must be safeguarded from both external and internal threats. One foundational strategy is user authentication, which requires employees, employers, and administrators to pass through an authentication process before being granted access to the system.

Different security protocols should be used to protect the information system. The integration of firewall technology is one effective measure for protecting the HRIS. Firewalls help prevent unauthorized network traffic from accessing Riordan Manufacturing's network and should be deployed to protect the corporate internet connection, the internal network (intranet), and the extranet.

In addition, an IDS (Intrusion Detection System) should be installed to detect unauthorized access attempts, and an IPS (Intrusion Prevention System) should be installed to actively prevent such access. A combination of firewall, IDS, and IPS provides a robust, layered defense for the organization's information systems.

Riordan Manufacturing should also integrate encryption technology to protect data in transit. Encryption allows employees to transfer data across the network without fear of interception, as it converts data into unreadable text that only an authorized party with a decryption key can read (Stalling, 2011).

Furthermore, management should implement a disaster recovery plan to protect data from both natural and man-made disasters. For example, all sensitive data should be backed up regularly, and backup copies should be stored at a location far from the original data so they can be recovered if the originals are lost. Cloud storage has become an effective backup strategy, enabling organizations to store data online securely. Finally, Riordan should establish a security policy requiring all employees to keep their passwords strictly confidential and to refrain from downloading unsolicited attachments.

Conclusion

This paper discusses the system design and security protocols for the Riordan HR information system. The system design is critical because it will improve the efficiency of employees in the human resources department. The paper also addresses security measures to deter unauthorized access, identifying firewalls, IDS, IPS, and encryption technology as key tools for protecting the company's information systems. Implementing these security tools will contribute to the effective protection of the new HRIS.

References

Stalling, S. (2011). Cryptography and Network Security: Principles and Practice (5th ed.). Pearson Education, Inc.

Dennis, A., Wixom, B. H., & Ruth, R. M. (2012). Systems Analysis and Design (5th ed.). Wiley.