Download MSCP Assignment 2022 and more Schemes and Mind Maps Computer science in PDF only on Docsity!
Higher Nationals
Internal verification of assessment decisions – BTEC (RQF)
INTERNAL VERIFICATION – ASSESSMENT DECISIONS Programme title HND^ in Computing Assessor Internal Verifier Unit(s) Unit 6 Managing a Successful Computing Project Assignment title Online Shopping Cart System Project Area: Security Student’s name List which assessment criteria the Assessor has awarded. Pass Merit Distinction INTERNAL VERIFIER CHECKLIST Do the assessment criteria awarded match those shown in the assignment brief? Y/N Is the Pass/Merit/Distinction grade awarded justified by the assessor’s comments on the student work? Y/N Has the work been assessed accurately? Y/N Is the feedback to the student? Give details:
- Constructive?
- Linked to relevant assessment criteria?
- Identifying opportunities for improved performance?
- Agreeing actions? Y/N Y/N Y/N Y/N Does the assessment decision need amend? Y/N Assessor signature Date Internal Verifier signature Date Programme Leader signature (if required) Date Confirm action completed Remedial action taken Give details: Assessor signature Date Internal Verifier signature Date Programme Leader signature (if required) Date
Grading Rubric Grading Criteria Achieved Feedback LO1 Establish project aims, objectives and timeframes based on the chosen theme P1 Devise project aims and objectives for a chosen scenario. P2 Produce a project management plan that covers aspects of cost, scope, time, quality, communication, risk and resources. P3 Produce a work breakdown structure and a Gantt Chart to provide timeframes and stages for completion. M1 Produce a comprehensive project management plan, milestone schedule and project schedule for monitoring and completing the aims and objectives of the project. LO2 Conduct small-scale research, information gathering and data collection to generate knowledge to support the project P4 Carry out small-scale research by applying qualitative and Quantitative research methods appropriate for meeting project aims and objectives. M2 Evaluate the accuracy and reliability of different research methods applied. D1 Critically evaluate the project management process and appropriate research methodologies applied. LO3 Present the project and communicate appropriate recommendations based on meaningful conclusions drawn from the evidence findings and/or analysis P5 Analyze research and data using appropriate tools and techniques. P6 Communicate appropriate recommendations as a result of research and data analysis to draw valid and meaningful conclusions. M3 Evaluate the selection of appropriate tools and techniques for accuracy and authenticity to support and justify recommendations. LO4 Reflect on the value gained from conducting the project and its usefulness to support sustainable organizational performance P7 Reflect on the value of undertaking the research to meet stated objectives and own learning and performance. M4 Evaluate the value of the project management process and use of quality research to meet stated objectives and support own learning and performance. D2 Critically evaluate and reflect on the project outcomes, the decision-making process and changes or developments of the initial project management plan to support justification of Recommendations and learning during the project.
Introduction This document consists of a project for vulnerability assessment and action plan for mystore.lk and research for collecting data regarding their security of the system and consumer research for study why consumers abandon shopping cart system. A project is a temporary and one-time endeavor, with a definite start and an end date, undertaken to create a unique product or service that brings about beneficial change or added value. This project has 4 steps as initiation, planning, execution and closure. Aims and objectives were engendered and specific milestones were formed at every phase of the project. As everything needs a plan to attain success, a project needs a plan and that includes milestones, resource management, cost management, risk management, change management, quality management and scope management. Work breakdown structure and Gantt chart provides guide to success of the project with better planning and schedule. Qualitative and quantitate research methods can be combined as one type of research can facilitate another. For example, a small number of interviews (qualitative) may be used to inform the design of a MCQ questionnaire (quantitative). In this project questionnaires were designed for management and consumers. Questionnaire for management includes questions to gather information regarding policies, system, equipment, malware protection, physical security while consumer research more focus on why consumers abandoning shopping cart system. Simple profiling, cross tabulation and correlation were used to data analyze and needed recommendations were made based on the findings of research. At the end of the document learning outcomes were discussed.
Project Initiatio n Projec t Closur e Project Implementation Review Project Life Cycle Monitoring Proje ct Definitio n Project Plannin g Detaile d & Control Plannin g Project Executi on
Project Management
“A project is a temporary endeavor undertaken to create a unique product or service, or a known product or service in a unique environment. “ A set of inter-related and controlled activities with start and finish dates, undertaken to achieve a unique objective conforming to specific requirements, including the restraints of time, cost and resources. “Project Management is the planning, organizing, monitoring and controlling of all aspects of a project in a continuous process to achieve its objectives, both internal and external.” Project Management Process Figure 1 project life cycle Project management process can be explained by using above shown figure 01 and it mainly entails with 04 steps as project initiation, project planning, project execution and project closure.
set up with the right project management office tools and equipment. Phase review should be done to check whether the project initiation requirements have been met. Project Planning Project planning phase is where the project solution is further developed in as much detail as possible and the steps necessary to meet the project’s objective are planned. In this step, the team identifies all of the work to be done. It includes creating a project plan including resource plan, financial plan, quality plan, risk plan, acceptance plan, communication plan, and procurement plan, contract the suppliers and perform phase review. We need a plan for managing the human resources on the team both in terms of availability and skills to execute the project in future and need to include who perform which task and when to start and complete. Also need to include managing costs and the budgeting elements of the project with any procurements or supplier engagements you might have. Communications plan includes setting out who is going to receive messages about the project, when and in what format. Risk management plan with dealing project risk including the processes for logging and tracking risks and quality plan that specifies the quality targets for the project or meeting the quality expectations of the organizational quality assurance program. After the project members appointed tasks and responsibilities should identified thoroughly to assign to the members. To plan a better project direction should be recognize properly and goals and deliverables of the project. WBS should be created and the availability of the resources including equipment and technology to test the system and the timescale should be checked. Project budget should be estimated including cost of the project with team’s time, facilities and all foreseen expenses ought to be considered. Risk assessment is another important task to done by clarifying the risks, their impacts, risk level and risk responses and verifying the risk owner or the responsible person impact can be accountable. We can prepare risk matrix with risk response planning as if suppliers of technical equipment delays happen it will impact on the project execution/ testing by pushes the execution and the risk response is confirming the delivery dates earlier the execution because risk level is high. Another example is what if the technical breakdown happens with the server, devices or
the network of the shopping system or team member got inattentive so the risk should be pre assessed. Project Execution Execution is a specific set of behaviors and techniques that companies need to master in order to have competitive advantage. It’s a discipline of its own.” Once the planning is done and got the approval from the project manager for the plan and the client also approved the process and the solution, project can be implemented in this testing can be started. This is the longest phase that requires most of the time of the project and also the critical. In this phase testing should be done with the IT infrastructure devices, network servers, physical security of the building and the wireless internet security. To make the recommendations by identifying the issues of the system data need to be collected via several methods. For that data collecting methods should be prepared as questionnaires, surveys, observations, focus groups and interviews. Then the collected data have to analyzed and make conclusion or recommendations to make right decisions by using data analyzing techniques as simple profiling, cross tabulation and regression analysis. After the analysis current security position should be communicated to the management before sending the final report to make needed actions. Final report must be prepare using all the collected data and the testing of the system and user awareness program can be arranged to make aware the management and the users of the system to avoid the future errors. For a better execution strategy can be used as begin with the end in mind, correct combination of skills, monitor with accountability, be flexible, team effort, listen to lead, acknowledging team work and alignment of vision. Project Closure During the final closure, or completion phase, the emphasis is on releasing the final deliverables to the customer, handing over project documentation to the business, terminating supplier contracts, releasing project resources, and communicating the closure of the project to all stakeholders. The last remaining step is to conduct lessons-learned studies to examine what went well and what didn’t. Through this type of analysis, the
Project Management Plan The Project Plan is the central document by which the project is formally managed. A Project Plan is a document which lists the activities, tasks and resources required to complete the project and realize the business benefits outlined in the Project Business Case. Milestones A milestone is “a major event in the project” and represents the completion of a set of activities and it can be demonstrated in a tabular form as below. Table 1 Milestone Schedule Milestone Milestone Description Planned Date Date Achieved Delay - ( Days) Business case approved. Business case has produced approved by project manager. and 5/10/18 5/10/18 (^) - Feasibility study approved. Feasibility study has approved by project manager.
Project charter approved. Project charter has formed and approved by project sponsor.
Project team appointed. Members of the project has appointed by the project admin.
Project office established. Office space has been decided and established by project admin.
Project plan approved. Project plan has produced and approved by project manager.
IT Infrastructure devices tested. IT Infrastructure management. has tested by 31/12/18 2/01/19 (^2) Network server tested. Network server management. has tested by 28/01/19 28/01/19 (^0) Building tested. Building has tested by management. 13/2/19 13/2/19 (^0) Wi-Fi tested. Wi-Fi has tested by management. 26/2/19 27/2/19 (^1) Data collection documents prepared. Data collection documents has prepared by research assistant.
Data analyzed. Collected data has analyzed by data analyst.
Final report accepted. Final report produced and approved by project manager.
User awareness program conducted. User awareness program has been planned and conducted by management.
Scope Management Project scope management ensures that all the work required, and only the work required to complete the project, is included in the project. With the use of inputs as project charter that previously prepared, enterprise environmental factors, organizational process assets through expert’s judgments, meetings with stakeholders, management and also templates, forms and standards we can plan scope management of the project to prepare the scope management plan. Collect Requirements The foundation of this process is the project charter and stakeholder register. From these, the team can identify requirements, collectively discuss details associated with meeting each requirement, conduct interviews and follow-on discussion to clarify the requirements, and document the requirements in sufficient detail to measure them once the project begins the execution phase. Main requirement of this project it to do an in-depth check on online shopping cart system’s security situation and assess their vulnerability to hackers and other threats and make recommendations of how to improve their security for Online Shopping Cart. Issues of varying severity required to be discovered quickly, and should notify management officials to take action immediately, rather than wait for the final report. Also another technical requirement is to provide recommendations for standardization of upcoming infrastructure installations, configurations, and maintenance. By carrying out the testing of the devices, system and network management expected to increase the device performance and decrease the customer complaints as a business objective. Using techniques as interviews, meetings with the management, users, distributing questionnaires requirements are expected to be collect. Define Scope Major deliverable of the project is prepare the vulnerability assessment and action plan by conducting an in-depth check on online shopping cart system’s security situation and identify issues and make appropriate recommendations by providing a clear picture of current security posture. By using project charter, preliminary project scope statement, approved change requests from the stakeholders as inputs and processing them as by
Resources Management Resource management is the efficient and effective deployment of an organization’s resources when they are needed. Such resources may include financial resources, inventory, human skills, production resources, or information technology (IT). Resource Assignment Matrix Project Vulnerability Assessment and Action- Plan Online Shopping Cart System Start 01/10/ Project manager End 09/04/ Project artifacts Project Task Business Sponsor Project Manager System Engineer Tech Support Specialist Cyber Security Specialist Project Admin Data Analyst Project Management and Requirements Initiation 1 Developing the business case A A R R R C R 2 Discussions with the Client A A R R R C R 3 Undertaking the feasibility study R R C 4 Appoint the project team A R 5 Setup a project office A R Planning 1 Creating the project plan R R R R C R 2 Creating the resource plan R R R R C R 3 Creating the financial plan R R R R C R 4 Creating the quality plan R R R R C R 5 Creating the risk plan R R R R C R 6 Creating the communication plan R R R R C R 7 Approval of the project plan A 8 Client Meeting- Approval A Execution 1 Testing the IT Infrastructure devices A R R C R 2 Testing the network server A R R R C R 3 Testing the physical security of the building A R R R C R 4 Testing the wireless internet security A R R R C R 5 Prepare the data collecting documents A C 6 Collecting Information - Research C 7 Data Analysis R R R R C 8 Prepare Current security posture report N A C C C C C 9 Client meeting- Current security posture R R C C C C C 10 Conduct -User awareness program R R C C C C C 11 Prepare Final report N C C C C C Closing 1 Handing over the Action Plan and final report A R C C C C C 2 Client meeting- Project Review A Creates the deliverable C Reviews the deliverable R Approves the deliverable A Notified when the deliverable is complete N Figure 2 Resource Assignment Matrix
sing above figure 2 can explain the resources management by whose responsibility is which task with the deliverables. To prepare a resource management plan need to consider all the resources necessary to complete the project, timeframes for the planned effort of each resource, number of each resources you’ll need per day/week/month, quantity of resource hours required per day/week/month and identify assumptions and constraints. Cost Management Cost management is a way of managing project cost, which includes estimating project costs. Therefore, the first thing you want to do is to get an estimation of all your costs at the task level. The main steps of budget management include; the definition of all resource requirements the project will use, from consultants, material, and equipment; development of a cost estimate of all the resources including human resources, and the development of a budget baseline that will be used to track and report budget expenditures. Budget Project Vulnerability Assessment Project # Online Shopping Cart System Project m anager Sponsor Budget Status Approved Budget Actual Expenditures to Date LKR 2,000,000.00 LKR 2 ,014 ,500. Actual Rem aining Budget -LKR 14,500. Budget Details - Oct. - April Direct Expenses Salaries Daily Rate # Days Total Cost Project manager LKR 2,200.00 13 8 LKR 303,600. System Engineer LKR 1,580.00 13 0 LKR 205,400. Tech Support Specialist LKR 1,560.00 12 0 LKR 187,200. Cyber Security Specialist LKR 1,550.00 12 0 LKR 186,000. Data Analyst LKR 1,000.00 13 8 LKR 138,000. Project Admin LKR 1,050.00 13 0 LKR 136,500. Other Direct Expenses Transportation LKR 140,000. Communication LKR 52,000. Printing and Stationary LKR 20,000. Total Direct Expenses LKR 1 ,368 , . Indirect Expenses Software Purchase LKR 285,000. Electricity LKR 57,800.
Quality Management Customer satisfaction is about making sure that the people who are paying for the end product are content with what they get. When the team gathers requirements for the specification, they try to write down all of the things that the customers want in the product so that you know how to make them delighted. Quality planning focuses on taking all of the information available to you at the beginning of the project and figuring out how you will measure quality and prevent defects. During the quality management process the project manager develops a quality management plan which identifies the quality standards that are relevant to the project, some of these standards may be initially set by the organization, the donor or are part of the technical competence area the project is focusing, such as health or education. Quality management process and tasks can be divided by the project team as follows considering quality policies/ standards of the client. Table 2 Name Role Quality Responsibility Project Manager Quality mentoring and coaching Data Analyst Measure data accuracy and authenticity System Engineer Make sure testing will met quality policy of client. Tech Support Specialist Make sure testing will met quality policy of client Cyber Security Specialist Make sure testing will met quality policy of client Project Admin Quality audits We can set quality goals and criteria to assess the quality and formerly establish strategy plan for accomplishing quality goals. Table 3 Quality Goals Project Quality Goals Goals Value Basis for Setting goal (^) Organization Norms wide Ex: Total defects injected number of (^10) 0.033 defects/Person hour. This is 10% better than Synergy 1.5, which is 0.036 defects/Person Hour 0.052 defects/Person Hour Strategy for meeting quality goals
Strategy Expected Benefits Ex: Do defect prevention using the standard defect prevention guidelines and process; use standards developed in synergy for coding. 10 -20 % reduction in defect injection rate and about 2% improvement in productivity Table 4 Quality Strategies Risk Management Risk Management includes the processes concerned with identifying, analyzing, and responding to project risk. Risk in projects is defined as something that may happen and if it does, will have an adverse impact on the project. There are four stages to risk management planning, they are: risk identification, risk analysis and quantification, risk response, risk monitoring and control. Risk Management Matrix (Risk Register) Project Vulnerability Assessment Project # Online Shopping Cart system Project manager Sponsor ID Risk Description Probability Impact Detectability^ Importance Category Trigger Event/Indicator Risk Response and Description Contingency Plan Owner 1 Supplier delay 2 2 2 16 Other Pushes the testing/ execution Transference Confirms delivery dates by planning phase Rent euipment immediately Project Admin 2 Server/ network error 2 3 2 24 Technolog ical Delay the reports, Cost overrun Mitigation Continuous check Immediate action Tech support Special 3 Team^ members^ might leave at short notice 1 1 2 4 Personnel cost^ overrun,^ Delay execution Transference Assign tasks so that more than one person is aware Transfer authority to next person assigned Project Admin Probability Impact Detectability Risk response 4: Highly likely/probable 4: Critical 4: Determined after impact has been realized Avoidance 3: Likely 3: Severe 3: Realized upon trigger event Transference 2: Somewhat likely 2:Moderate 2: Immediately prior to trigger event; can be mitigated prior to trigger if monitored Mitigation 1: Unlikely/improbable 1:Minimal 1: Determined well in advance of occurrence or trigger event Acceptance Figure 4 Risk register
Figure 5 Communication Matrix Page 19
Work Breakdown Structure (WBS) and Gantt chart A Work Breakdown Structure (WBS) is a decomposition of all the work necessary to complete a project. A WBS is arranged in a hierarchy and constructed to allow for clear and logical groupings, either by activities or deliverables. Work Breakdown Structure Outline Table 5 WBS Structure Project Start 01/10/2018 Online Shopping Cart system’s Security Level WBS Task Description 1 1 Project Initiation 2 1.1 Developing the business case 3 1.1.1 Discussions with the Client 2 1.2 Undertaking the feasibility study 2 1.3 Appoint the project team 2 1.4 Setup a project office 1 2 Project Planning 2 2.1 Creating the project plan 3 2.1.1 Creating the resource plan 3 2.1.2 Creating the financial plan 3 2.1.3 Creating the quality plan 3 2.1.4 Creating the risk plan 3 2.1.5 Creating the communication plan 2 2.2 Approval of the project plan 2 2.3 Client Meeting- Approval 1 3 Project^ Execution 2 3.1 Testing 3 3.1.1 Testing the IT Infrastructure devices 3 3.1.2 Testing the network server 3 3.1.3 Testing the physical security of the building 3 3.1.4 Testing the wireless internet security 2 3.2 Prepare the data collecting documents 3 3.2.1 Collecting Information - Research 3 3.2.2 Data Analysis 2 3.3 Prepare Current security posture report 2 3.4 Client meeting- Current security posture 2 3.5 Conduct -User awareness program 2 3.6 Prepare Final report 1 4 Project Closure 2 4.1 Handing over the Action Plan and final report 2 4.2 Client meeting- Project Review Page 20
