NOMQHELE M NDLOVU
STAGE 1
TITLE: SCHOOL DATA SECURITY AND ACCESS CONTROL SYSTEM
PROBLEM DESCRIPTION
Sizane High School currently does not have a structured system to control access to digital
student information such as fee records, results and personal details. In many cases,
passwords may be weak, shared among staff or not regularly updated. This creates risks
such as unauthorised access, data tampering and loss of confidentiality. Without proper
access control and security measures, sensitive information may be exposed or misused,
which can affect the integrity of school records.
STATEMENT OF INTENT
The intent of this project is to design a secure system that controls access to school data.
The project aims to improve data protection by introducing structured access levels, strong
authentication methods and monitoring mechanisms. This will help ensure that only
authorised users can access specific information while maintaining confidentiality, integrity
and availability of data.
DESIGN SPECIFICATIONS
• The system must define different user roles with specific access rights
• It should enforce strong password rules and authentication measures
• It must record and monitor user access activities
• It should include data protection strategies such as backups and encryption
STAGE 2: INVESTIGATION OF RELATED IDEAS
Manual control of records
• Access to records is controlled physically using locks and restricted offices
Advantages
• Simple to manage without technical knowledge
• No risk of cyber attacks
Disadvantages
• Easy for unauthorized individuals to gain access if keys are shared
• No tracking of who accessed the records
Basic password protection
• Users log in using a username and password
Advantages
• Easy to implement
• Provides basic level of security
Disadvantages
• Weak passwords can be guessed easily
• Users may share passwords
Biometric systems
• Uses fingerprints or facial recognition to control access
Advantages
• Very secure and difficult to bypass
• No need to remember passwords
Disadvantages
• Expensive to implement
• Requires special hardware
STAGE 3: GENERATION OF IDEAS
1. Password-only system
• A system that relies only on usernames and passwords for access
Advantages
• Simple and low cost
Disadvantages
• Not very secure if passwords are weak or shared
2. Biometric security system
• Uses fingerprint or facial recognition for authentication
Advantages
• High level of security
Disadvantages
• Expensive and requires special devices
3. Role-based access control system
• Users are assigned roles and each role has specific permissions
Advantages
• Provides structured and secure access control
• Reduces risk of unauthorized access
Disadvantages
• Requires planning and management of roles
STAGE 4: DEVELOPMENT / REFINEMENT OF IDEAS
CHOSEN IDEA: ROLE-BASED ACCESS CONTROL SYSTEM
JUSTIFICATION OF CHOICE
• It provides a clear structure of who can access specific data
• It improves security by limiting access based on user roles
• It is cost effective compared to biometric systems
REFINED GENERATED IDEAS
1. Defined user roles
• Admin: Full access to all records
• Bursar: Access to fee records only
• Teacher: Access to student results only
• Auditor: View only access
2. Strong password policy
• Minimum of 8 characters
• Must include letters and numbers
• Passwords must be changed regularly
3. Access logging and monitoring
• Record user logins and actions
• Detect unauthorized access attempts
4. Data protection measures
• Regular backups of data
• Encryption of sensitive information
STAGE 5: PRESENTATION OF THE FINAL SOLUTION
EXAMPLE OUTPUT
User: Teacher
Access Attempt: Fee Records
Result: DENIED
Reason: Insufficient permissions
User: Bursar
Login Status: SUCCESS
Password Strength: STRONG
STAGE 6: EVALUATION AND RECOMMENDATION
RELEVANCE TO STATEMENT OF INTENT
• The system improves control over who can access sensitive data
• It enhances data security and confidentiality
• It reduces risks of unauthorized access and data misuse
CHALLENGES ENCOUNTERED
• Defining appropriate access levels for different users
• Ensuring users follow password policies
RECOMMENDATIONS
• Provide training for staff on security practices
• Regularly review and update access permissions
• Implement additional security measures if needed