Case Study

A Car rental company requires a mobile and web application with a database system as a backend to assist in managing the hire and returns of their saloon, sedan, and cross-country 4X4 cars across their Five (5) branches in Ghana, specifically Accra, Kumasi, Takoradi, Sunyani, and Tamale.

The database maintains details of customers, vehicles, rentals, maintenance and rental transactions. The system is expected to record transactions (i.e. when a vehicle is rented and when it is returned), calculate how much rental costs and determine which rentals are overdue, and also permit for customers to register on the applications before they can make bookings. The company desires to enforce their policy that only authorized users should have access to information so as to preserve customers and staffs privacy, credit card details and other confidential and competitive company data, only authorized users are permitted to modify data, and that the system should be accessible as and when authorized users need it.

Discuss the potential threats of the database and access the economic, social, and regulatory ramifications of those threats on the company, and how to enforce security on the database system in relation to confidentiality, integrity, and availability.