ANALYSIS Department of Social Welfare and Development (DSWD) is a government organization that provides social protection and welfare to less fortunate individual or family. To ensure that the agency fulfills its mission and vision, DSWD formulated its ISSP that focuses on four major developments. These developments are categorized as follows: 1. Establishing Strategic and Results-Oriented Policies in Social Protection Utilizing Information and Communications Technology. 2. Harnessing Information and Communications Technology for Better and Faster Social Protection Programs and Services. . Introducing Financial Reforms to Sustain the Reform Process Utilizing Information and Communications Technology. 4. Improving Delivery Systems and Capacities through Information and Communications Technology Although rated as the least corrupt Philippine government agency, the Department of Social Welfare and Development is also very impressive when it comes to their Information Systems Strategic Plan (ISSP). Everything is enumerated from the number of personnel, hardware, software and the trainings required for the department to meet or finish all of its needed systems.
Their ISSP is well budgeted, documented and updated. The government agency is also already adapting to the current trends in technologies as it has their own Facebook page and Twitter account as their way of communicating or reaching out with the people. Though the plan is already remarkable, it can still be improved. Instead of having several systems for the department, it can be consolidated and merged into one enterprise system portal and be easily accessible and organized via either the intranet or the internet.
Also the department might want to also reconsider redesigning its current website. Even though it is a social department, it should show firmness and formality as a government agency that imposes good policies. With regards to the cost analysis, the government fund was well divided to different projects but it can be improved by just concentrating on using open sourced software alternatives for the development of the proposed systems. As for the network infrastructure, DSWD implemented VLAN to segment access to the network.
Having this, defining access-list control on a certain LAN segment will be easier. The agency also utilizes the use of firewall. As we all know, a private network connecting to the Internet can expose critical or confidential data to malicious attack from anywhere in the world. All servers should be placed Demilitarized zone (DMZ). In a DMZ configuration, most computers on the LAN run behind a firewall connected to a public network like the Internet.
Since several servers are being maintained, we recommend the implementation of Active Directory. To ensure that only one policy runs on Head Office workstations and branches, the group decided to implement Active Directory. Along with this, Network Access Control (NAC) should also be implemented wherein only workstations that passed the network access checklist can be given rights to shared resources. NAC checklist process will be later discussed on this document. Why Active Directory?
Active Directory (AD) was designed to provide a centralized repository of information, or data store that could securely manage the resources of an organization. Active Directory makes it possible for different types of information to be stored in a centralized distributed database. Because all information stored in Active Directory is located in one centralized, distributed data store; administrative needs are reduced, the availability of security information is increased, and there is an improvement in the structure of information.
With Windows Server 2003, the Active Directory account database can accommodate a billion objects, and multiple domain controllers can host copies of the Active Directory store. These features resolve the scalability, poor performance and single point of failure issues experienced with the Windows NT domain model. Active Directory also has an extensible schema. Schema refers to the structure of the database. What this means is that you can expand and customize the types of information stored within Active Directory.