Healthy Body Wellness Center
Business Requirements Document
Healthy Body Wellness Center/Initiative
April 2021
Version 1.00
Company Information
, Tech Comm TemplateBRD
1 Document Revisions (Not required for performance assessment)
Version
Date Document Changes
Number
04/01/2021 1.00 Initial Draf
2 Approvals (Not required for performance assessment)
Role Name Title Signature Date
Project Sponsor
Business Owner
Project Manager
System Architect
Development Lead
User Experience Lead
Quality Lead
Content Lead
Template provided by TechWhirl.com
1
copyright INKtopia Limited | All Rights Reserved
, Tech Comm TemplateBRD
3 Introduction
3.1 Project Summary
3.1.1 Objectives
The Healthy Body Wellness Center (HBWC) is an organization that strives to provide the local and
national community with the tools and education necessary to take control of their health and
overall wellbeing. In their pursuit to promote overall health and wellbeing HBWC offers the
medical community at large financial assistance in the form of medical grants to help investigate
and promote health and wellness. HWBC’s Office of Grants Giveaway (OGG), is responsible for
accepting and paying out approved applications for financial assistance with most grants being
disbursed to small hospitals. The OGG currently utilizes the Small Hospital Grant Tracking System
(SHGTS) which is an application that is used to collect necessary data about the hospitals it funds
and to distribute funds via ACH processing payments directly to the hospitals financial
institutions. To keep in compliance with federal security regulations, improve services to partner
organizations, and modernize the department’s infrastructure HBWC’s Board of Directors has
contracted Endothon Security Consulting to complete a security assessment report (SAR) to
assess the state of the OGG’s infrastructure, security polices, and business processes.
3.1.2 Background
HBWC’s current Network and Security Manager, is preparing to retire in 30 days and the new
Network and Security Manager, on behalf of HBWC’s Board of Directors, has requested a
security assessment report of the company. This report focused on conducting a thorough
analysis of the company’s infrastructure focusing on:
Hardware and Sofware utilization with a particular emphasis on whether the resource
can still be utilized or should be retired
Reviewing current business, technical, security, and regulatory processes for adherence
to industry standards
Completing a network threat analysis of HBWC’s network, preparing recommendations
for securing the system, and understanding application sofware requirements to
improve security
Recommending infrastructure updates focusing on the the LAN, improving remote
access for employees, securing the ACH transmission process, adhering to federal
regulation including HIPAA patient and organization specific data, and maintaining access
to cloud-based SaaS providers for services to OGG.
The results of the SAR identified issues in all reviewed areas. Areas of concern for the SAR
identified that the Office of Grants Giveaway’s primary application, the SHGTS, was running on
aging hardware utilizing Microsof Windows Server 2008 R2, Microsof Access 2010, and an
inability to secure or allow simultaneous connections to critical systems. The recommended
steps to remediate these issues are to update our system to a Microsof Azure cloud-based IaaS
and migrating to a new Microsof SQL system. Taking these steps should help us secure our
Template provided by TechWhirl.com
2
copyright INKtopia Limited | All Rights Reserved
Business Requirements Document
Healthy Body Wellness Center/Initiative
April 2021
Version 1.00
Company Information
, Tech Comm TemplateBRD
1 Document Revisions (Not required for performance assessment)
Version
Date Document Changes
Number
04/01/2021 1.00 Initial Draf
2 Approvals (Not required for performance assessment)
Role Name Title Signature Date
Project Sponsor
Business Owner
Project Manager
System Architect
Development Lead
User Experience Lead
Quality Lead
Content Lead
Template provided by TechWhirl.com
1
copyright INKtopia Limited | All Rights Reserved
, Tech Comm TemplateBRD
3 Introduction
3.1 Project Summary
3.1.1 Objectives
The Healthy Body Wellness Center (HBWC) is an organization that strives to provide the local and
national community with the tools and education necessary to take control of their health and
overall wellbeing. In their pursuit to promote overall health and wellbeing HBWC offers the
medical community at large financial assistance in the form of medical grants to help investigate
and promote health and wellness. HWBC’s Office of Grants Giveaway (OGG), is responsible for
accepting and paying out approved applications for financial assistance with most grants being
disbursed to small hospitals. The OGG currently utilizes the Small Hospital Grant Tracking System
(SHGTS) which is an application that is used to collect necessary data about the hospitals it funds
and to distribute funds via ACH processing payments directly to the hospitals financial
institutions. To keep in compliance with federal security regulations, improve services to partner
organizations, and modernize the department’s infrastructure HBWC’s Board of Directors has
contracted Endothon Security Consulting to complete a security assessment report (SAR) to
assess the state of the OGG’s infrastructure, security polices, and business processes.
3.1.2 Background
HBWC’s current Network and Security Manager, is preparing to retire in 30 days and the new
Network and Security Manager, on behalf of HBWC’s Board of Directors, has requested a
security assessment report of the company. This report focused on conducting a thorough
analysis of the company’s infrastructure focusing on:
Hardware and Sofware utilization with a particular emphasis on whether the resource
can still be utilized or should be retired
Reviewing current business, technical, security, and regulatory processes for adherence
to industry standards
Completing a network threat analysis of HBWC’s network, preparing recommendations
for securing the system, and understanding application sofware requirements to
improve security
Recommending infrastructure updates focusing on the the LAN, improving remote
access for employees, securing the ACH transmission process, adhering to federal
regulation including HIPAA patient and organization specific data, and maintaining access
to cloud-based SaaS providers for services to OGG.
The results of the SAR identified issues in all reviewed areas. Areas of concern for the SAR
identified that the Office of Grants Giveaway’s primary application, the SHGTS, was running on
aging hardware utilizing Microsof Windows Server 2008 R2, Microsof Access 2010, and an
inability to secure or allow simultaneous connections to critical systems. The recommended
steps to remediate these issues are to update our system to a Microsof Azure cloud-based IaaS
and migrating to a new Microsof SQL system. Taking these steps should help us secure our
Template provided by TechWhirl.com
2
copyright INKtopia Limited | All Rights Reserved
