Thank you for submitting your individual essay for the Launching into Cyber Security Module
In this essay, you were asked to produce a report to management of Queens Medical Centre on a web-based appointment and scheduling management information system (ASMIS), providing the following information:
Details of the benefits of the ASMIS as well as the potential problems including potential cyber threats to the system.
The report must include at least two UML diagrams. Each diagram should show aspects of the system and a threat modelling technique that can be used to identify and mitigate potential cyber threats.
A background to the UML diagrams and modelling techniques, along with justifications for their use with supporting references.
The Cyber Security technologies that can be used to address the problem, discussing the strengths and weaknesses of the solutions with references to examples in which the technology has been employed.
The report begins by providing a background to UML and discussing various threat modelling techniques, and focuses on the STRIDE technique with a summary of the type of threats. It the focuses on the benefits to be derived from ASMIS when installed. A segmented network architecture with OTP, vLAN and ACL technologies are proposed as potential solutions. A class and sequence diagram are used to demonstrate how the proposed solution will address the threats identified.
The structure of the report could be better as it is hard to follow. For example, introducing UML and threat modelling without context was hard to follow. Ideally, an introduction to ASMIS systems, describing the system objectives and benefits, before discussing UML and threat modelling techniques would the best. Furthermore, the class diagram need some revisions. It is unclear why “TestResults” class is not connected to “User” class and “Consultants” connected to “User” class. The report also failed to critically evaluate the proposed solutions by discussing the weaknesses of these solution to provide a balanced view to Management.
Overall, some good work done. To improve your grades further, do take note of the developmental areas highlighted above.