Healthy Body Wellness Center (HBWC)
High-Level Technical Design
Version 1.0
Updated 4/21/2020
,HBWC
High-Level Technical Design
Table of Contents
High-Level Technical Design 1
1. Introduction (Not required for performance assessment) 4
2. Current Systems 4
3. Goals, Objectives, and Rationale for New or Significantly Modified System 4
3.1 Project Purpose 4
3.2 System Goals and Objectives 4
3.3 Proposed System 4
3.3.1 System Scope 4
3.3.2 Processes Supported 4
3.3.3 High-Level Functional Requirements 4
3.3.4 Summary of Changes 5
4. Factors Influencing Technical Design 5
4.1 Relevant Standards 5
4.2 Assumptions and Dependencies 5
4.3 Constraints 5
4.4 Design Goals 5
5. Proposed System 5
5.1 High-Level Operational Requirements and Characteristics 5
5.1.1 User Community Description 6
5.1.2 Nonfunctional Requirements 6
5.2 High-Level Architecture 6
5.2.1 Application Architecture 7
5.2.2 Information Architecture 8
5.2.3 Interface Architecture (not required for performance assessment) 8
5.2.4 Technology Architecture 8
5.2.4.1 Platform 9
5.2.4.2 System Hosting 9
5.2.4.3 Connectivity Requirements 9
5.2.4.4 Modes of Operation 9
5.2.5 Security and Privacy Architecture 9
5.2.5.1 Authentication 9
5.2.5.2 Authorization 9
5.2.5.3 Encryption 9
6. Analysis of the Proposed System 10
6.1 Risks 10
Version 1.0 2
, HBWC
High-Level Technical Design
1. Introduction
Not Applicable
2. Current Systems
Healthy Body Wellness Center (HBWC) is a company that promotes wellness through grants
that help fund community projects. HBWC’s grants are funded through their Office of Grants
Giveaways (OGG) which utilizes a system called the Small Hospital Grant Tracking System
(SHGTS). All grants entered into the SHGTS system are checked for eligibility against
information obtained from the National Institute of Health (NIH). Grants are then reviewed and
approved by the Executive Review staff and are disbursed to applicants to use for 30 days. After
30 days all unused grant monies are returned to HBWC’s OGG for use with other approved
grant applicants. The technology infrastructure is located on site at HBWC’s main office in an
unsecured location in the basement of the building. The environmental controls in this room
need to be updated to support a more efficient server room. The SHGTS is housed in a
Microsoft Access 2010 database which runs on a Microsoft Server 2008 R2 system. The
SHGTS is a single user system which can only be accessed by one department, company, or
grant applicant at a time. Currently data transmissions from the NIH need to be scheduled at
specific times of the day to ensure proper data delivery into the system and to not interfere with
Executive Review Staff or Grant Applicants. The SHGTS runs on a small desktop computer
located on site at HBWC which is access over the company’s local area network. The local area
network (LAN) is several years old and is need of a redesign that will help secure ACH
transmissions from the Accounting Department, allow secure third-party connections for the
OGG & NIH, and allow secure employee remote access. HBWC staff may access the database
remotely via means of a VPN connection.
The SHGTS database houses grant information, applicant information, and other private health
information which has been identified as being unsecure during a Security Assessment Review
performed by Endothon Security Consulting group. The HBWC’s web servers have also been
identified as unsecure lacking cryptographic controls, auditing, and user accounts do not meet
security objectives for the company. Information transmitted
Another system that HBWC utilize that is not tied directly into the SHGTS is Quickbooks which
is a database used by the Accounting Department. The information in the Quickbooks system
specifically houses information about employee salaries, job titles, and dates of employment for
both current and past employees.
3. Goals, Objectives, and Rationale for New or Significantly Modified
System
3.1 Project Purpose
The purpose of this project is to help modernize HBWC’s S.H.G.T.S so that it will streamline the
application process, improve accessibility by internal employees, external partner organizations,
and grant applicants, and update company online security procedures. While much of the
information stored on the Microsoft Access 2010 database will be migrated to the cloud the
Version 1.0 3
High-Level Technical Design
Version 1.0
Updated 4/21/2020
,HBWC
High-Level Technical Design
Table of Contents
High-Level Technical Design 1
1. Introduction (Not required for performance assessment) 4
2. Current Systems 4
3. Goals, Objectives, and Rationale for New or Significantly Modified System 4
3.1 Project Purpose 4
3.2 System Goals and Objectives 4
3.3 Proposed System 4
3.3.1 System Scope 4
3.3.2 Processes Supported 4
3.3.3 High-Level Functional Requirements 4
3.3.4 Summary of Changes 5
4. Factors Influencing Technical Design 5
4.1 Relevant Standards 5
4.2 Assumptions and Dependencies 5
4.3 Constraints 5
4.4 Design Goals 5
5. Proposed System 5
5.1 High-Level Operational Requirements and Characteristics 5
5.1.1 User Community Description 6
5.1.2 Nonfunctional Requirements 6
5.2 High-Level Architecture 6
5.2.1 Application Architecture 7
5.2.2 Information Architecture 8
5.2.3 Interface Architecture (not required for performance assessment) 8
5.2.4 Technology Architecture 8
5.2.4.1 Platform 9
5.2.4.2 System Hosting 9
5.2.4.3 Connectivity Requirements 9
5.2.4.4 Modes of Operation 9
5.2.5 Security and Privacy Architecture 9
5.2.5.1 Authentication 9
5.2.5.2 Authorization 9
5.2.5.3 Encryption 9
6. Analysis of the Proposed System 10
6.1 Risks 10
Version 1.0 2
, HBWC
High-Level Technical Design
1. Introduction
Not Applicable
2. Current Systems
Healthy Body Wellness Center (HBWC) is a company that promotes wellness through grants
that help fund community projects. HBWC’s grants are funded through their Office of Grants
Giveaways (OGG) which utilizes a system called the Small Hospital Grant Tracking System
(SHGTS). All grants entered into the SHGTS system are checked for eligibility against
information obtained from the National Institute of Health (NIH). Grants are then reviewed and
approved by the Executive Review staff and are disbursed to applicants to use for 30 days. After
30 days all unused grant monies are returned to HBWC’s OGG for use with other approved
grant applicants. The technology infrastructure is located on site at HBWC’s main office in an
unsecured location in the basement of the building. The environmental controls in this room
need to be updated to support a more efficient server room. The SHGTS is housed in a
Microsoft Access 2010 database which runs on a Microsoft Server 2008 R2 system. The
SHGTS is a single user system which can only be accessed by one department, company, or
grant applicant at a time. Currently data transmissions from the NIH need to be scheduled at
specific times of the day to ensure proper data delivery into the system and to not interfere with
Executive Review Staff or Grant Applicants. The SHGTS runs on a small desktop computer
located on site at HBWC which is access over the company’s local area network. The local area
network (LAN) is several years old and is need of a redesign that will help secure ACH
transmissions from the Accounting Department, allow secure third-party connections for the
OGG & NIH, and allow secure employee remote access. HBWC staff may access the database
remotely via means of a VPN connection.
The SHGTS database houses grant information, applicant information, and other private health
information which has been identified as being unsecure during a Security Assessment Review
performed by Endothon Security Consulting group. The HBWC’s web servers have also been
identified as unsecure lacking cryptographic controls, auditing, and user accounts do not meet
security objectives for the company. Information transmitted
Another system that HBWC utilize that is not tied directly into the SHGTS is Quickbooks which
is a database used by the Accounting Department. The information in the Quickbooks system
specifically houses information about employee salaries, job titles, and dates of employment for
both current and past employees.
3. Goals, Objectives, and Rationale for New or Significantly Modified
System
3.1 Project Purpose
The purpose of this project is to help modernize HBWC’s S.H.G.T.S so that it will streamline the
application process, improve accessibility by internal employees, external partner organizations,
and grant applicants, and update company online security procedures. While much of the
information stored on the Microsoft Access 2010 database will be migrated to the cloud the
Version 1.0 3
