Smart Software Pty Ltd: Overview
There is different category of ethical issues associated with the handling of the official information by the staff members of Smart Software Private Limited. The prime ethical issue associated with the open source software are the sources of the software, annotating over license rules and necessities, underestimating the cost of the open source software, skimping on usability (Müllner, 2016). The compatibility issues of the software requirements are the other category of ethical issue associated with the use of the open source software’s. The liabilities and warranties are the other ethical issue associated with the use of the free software’s used by the teleworkers of the organization. There are lots of hidden costs associated with the use of the free software’s such as the overhead and maintenance cost (Giannakis & Papadopoulos, 2016). All these discussed issues are needed to be addressed so that this software development industry can get the desired results from the tele workers.
The measures which the management of this organization should incorporate so that the staff members cannot handle the data unethically are as followings:
- Effective communication forum where all the stakeholders of the business will be understanding the importance of security and privacy issues associated with the information of this business.
- Data Privacy Act of 1988 must be enacted in the working modules of this industry.
- Confidentiality policy can be implemented in this organization as it will help in maintaining the confidentiality of the data which are transported from one unit of the organization to another.
- Lockable document must be used in the organization so that only authorized personnel can get hold of the information.
- Professional communication training must be given to all the stakeholders of this business so that they are aware of the ways by which data are mishandled.
- Application of the encrypted techniques can be successfully implemented in this software development organization.
The different categories of information assets associated with Smart Software Pty Ltd is the software which are developed to be delivered to their clients, the internet connections and the computer systems used for the designing and the developmental purposes (Uhl & Gollenia, 2016). Communication platforms which are used to understand the requirement of the project and the payment platform which are used to get the milestone payments are the other kinds of information assets of this organization. The QA tools are the other categories of information systems of this organization, all the IT resources of the organization falls under the category of the information assets. The laptops which are provided to the teleworkers are also the information assets associated with this organization (Hopkin, 2018). All the software’s and the tools associated in each of the phases of the software developed are in the category of information asset.
There are different categories of risk associated with the information asset such as the followings:
- Computer systems: The different categories of information security risk associated with the use of the computer systems is the corruption and loss of data or any kinds of infrastructural or hardware failure.
- Internet Connections: Natural disasters are the prime security risks associated with the active connections which are required in this software development organization.
- Communication platforms: The different categories of cyber security issues such as the attack of the ransomeware are the prime risks associated with this information asset.
- Payment gateways: The security risks associated with the most reputed payment gateways such as the PAYPAL is the interception of the transaction by the cyber criminals.
- QA tools: Maintaining the originality of the product is the most information security associated with the use of the QA tools.
- Designing and developmental tools: The tools used in the architectural phase of the software development model have privacy issues associated with them which are needed to be addressed with the help of original software’s.
The following risk management framework which can be successfully applied in this organization are described below:
Figure 1: Risk management framework
(Source: Created by the author)
Step 0: Preparation: All the stakeholders of the business should be aware of the implementation of this framework so that the desired results are obtained (Renz, 2016).
Step 1: Categorization of controls: The flow of information from one unit to another with in the organization as well outside the environment should be categorized.
Step 2: Implementation of the controls: The environment associated with each of the assets should be managed so that the ethical and security issues can be addressed.
Step 3: Authorize the systems: The risks associated with the information assets should be categorized according to their level of impact on the productivity if the organization.
Step 4: Monitor controls: The security measures associated with information assets are considered and impact analysis can be conducted on them (Shrivastava & Rathod, 2017).
Step 5: Evaluation procedures: This proposed framework should be professionally incorporated as it is discussed and each of the phases should be evaluated.
Step 6: Access Control: The limit of the security controls should be evenly calculated before it is incorporated in the environment.
References
Giannakis, M., & Papadopoulos, T. (2016). Supply chain sustainability: A risk management approach. International Journal of Production Economics, 171, 455-470.
Hopkin, P. (2018). Fundamentals of risk management: understanding, evaluating and implementing effective risk management. Kogan Page Publishers.
Müllner, J. (2016). From uncertainty to risk—a risk management framework for market entry. Journal of World Business, 51(5), 800-814.
Renz, D. O. (2016). The Jossey-Bass handbook of nonprofit leadership and management. John Wiley & Sons.
Shrivastava, S. V., & Rathod, U. (2017). A risk management framework for distributed agile projects. Information and software technology, 85, 1-15.
Uhl, A., & Gollenia, L. A. (Eds.). (2016). Business transformation management methodology. Routledge.