Database method

Nguyễn Công Tú – GCH15268 Section A – Management Summary 1.1 A summary of the company's performance Walk2Live is a health and fitness franchise that has been steadily growing over the last 20 years By then she had registered the company name and hired a part time financial consultant, Ben Brode, to help her set up the franchising A year later Ben decided to become an active partner in the business and joined full time as the CFO The company has since evolved from being a walking club to being a wellness centre, offering classes, such as spinning, yoga and Pilates, in addition to the walking and running clubs Furthermore, the brand has created their own health food and supplement range that is sold at the centres Some centres have also opened up juice bars where members can socialise after class Currently Walk2Live has a head office, employing 15 people, as well as 55 franchises in different towns and cities across the UK Each franchise is responsible for their region and this is managed locally, either manually, through spreadsheets, or a simple website connected to a database Each area needs to maintain a list of members, with the groups, classes and programmes that these members are assigned to, according to age and fitness level A few years ago, Janet and Ben decided that they needed a central system to manage their central franchises, and also to allow each franchise to manage its operations in a more structured way Ben decides to use a software development company, SudoSoftly, to design and develop the system So a new system called Alive is built The new system will allow a franchise to track members , their classes and programs, and will also include an ordering system for marketing materials and health food and additional scope In addition, the system will help franchisees have links with charities to manage those relationships The new system has processes that are generally simple and not computationally complicated The project is not an important project in real time or safe After the case study tells them that the Agile method they are considering is the DSDM Atern Therefore, throughout this report, we will discuss why DSDM has chosen to be an appropriate methodology, high-level functions of the Alive project and legal, ethical and professional issues for project A 1.2 Why is the project suitable with DSDM? DSDM Atern Atern is a vendor-independent approach that recognises that more projects fail because of people problems than technology Atern’s focus is on helping people to work effectively together to achieve the business goals Atern is also independent of tools and techniques 1|Nguyen Cong Tu GCH15268 enabling it to be used in any business and technical environment without tying the business to a particular vendor (DSDM Atern Handbook (2008)).1 There are eight principles underpinning DSDM Atern These principles direct the team in the attitude they must take and the mind set they must adopt to deliver consistently Focus on the business need Under the scenario of the post, the new system was called Alive The new system will allow a franchise to track its members, classes and programs, and will also include an ordering system for marketing materials and health food and additional scope In addition, the system will help the franchisees have links with charities to manage those relationships Alive systems are business systems so using the DSDM (Dynamic System Development Method) In this case will focus on business needs Deliver on time We can use Timebox to plan ahead and set the timeframe for the ALive project Because using timebox will help us manage time, the days never change; Different features depending on the business priorities, to achieve the right time limit Collaborate The cooperation between teams working in the spirit of cooperation and active commitment is very important here the company should cooperate with the development company SudoSoftly to work best Collaboration encourages shared understanding, speed, and ownership Teams must be empowered and include business representatives Never compromise quality According to a case study on the company's Alive project, the Alive project can be considered as a small project The Alive project functions are simple and not too complex (just a system of management data, not complicated) As a small and simple project, the quality of customer service is not possible Developers can fine tune their quality Build incrementally from firm foundations Increments allow the business to take advantage of work before the final product is complete, encouraging stakeholder confidence and feedback This is based on doing just enough upfront analysis to proceed and accepting that detail emerges later Develop iteratively Businesses can change their requirements during project development when they use DSDM Alive project systems can evolve repeatedly when feedbacks are returned at the end of an incremental delivery https://www.agilebusiness.org/resources/dsdm-handbooks/dsdm-atern-handbook-2008 2|Nguyen Cong Tu GCH15268 Communicate continuously and clearly Missing work can always happen So here Scott should use Timboxes It will allow for constant change and recognize that the solution is right Demonstrate control In order to monitor the effectiveness and success of the project, the team should actively monitor and control progress in accordance with the Foundations Stage We need to continually assess the viability of a project based on business objectives A 1.3 Benefits and Drawbacks of DSDM for the Project Advantages - Agile methodology provide regular view to the client in case of adjustments required It is less expensive - Less documentation required Able to give quick response to changing requirements The end result in good quality software in less possible time duration and satisfy customer’s requirements Able to face to face communication with client and continuous input of client’s requirements Continuous attention to technical excellence and good design Constant attention to technical requirements and good design Disadvantage - Did not get more time for planning, design and documentation Only senior programmer is capable to take any decision required during development phase The project can easily spoil if client if not sure about final outcome that they want Section B – High level requirements analysis and MoSCoW prioritisation B1 Review the ‘high level requirements’ list given at the end of Appendix A Requirements List Exercise Each person was asked to list their requirements for the new system on a form supplied by SR The following is a summary of those requirement sheets: B1.1 Identify any of the requirements that you feel are not appropriate high level requirements, giving your reasons for this 3|Nguyen Cong Tu GCH15268 1.1 High Level Requirements Analysis After learning and reading some high level requirements documentation The following is a definition of high level requirements High level requirements are determined, most important requirements are those with the largest potential benefit We can also understand high level requirements as necessary in a service application Remember, a high level requirement should be a functional requirement that can be delivered to the user as part of an incremental approach using a time box (or number of time boxes) B 1.1.1 Inappropriate Requirements for High Leve With sample requests provided by Scott Runner (SR) Each person in the company has listed their requirements for the new system In terms of their requirements, some of these requirements are high-level requirements and some requirements are not But to develop a new system we have listed and eliminated the requirements Not considered a high-level requirement Requests that are not considered high requirements will be listed below B 1.1.2 Inappropriate Functional Requirements and Non-Functional Requirements for High Level Agreeing high level requirements at the beginning of the project Functional Services What system can do? + login + Search + Display + By product  No detail - Non-Functional - Constraint - How the system should be? + Flexible + Secure + Fast / Performance + Usability + Arability  Detail High level requirements are determined, System is then divided into a number of components or time boxes based on priority of the requirements Most important requirements are those with the largest potential benefit Here are some requirements that I feel not match the high-level requirements It will be clearly stated in the section below Non-Functional Ben Brode (CFO) Number Not appropriate high level requirements - We also need the following: * The site should be easy to use and quick to load * We probably need to arrange for this site to actually “be” on the internet * We need to register the web URL Walk2Live.co.uk 4|Nguyen Cong Tu GCH15268 Reasons -Websites must be easy to use and load fast, this is a low level requirements because it is not an important requirement and brings high potential benefits to the system This requirement is the nonfunction I defined above 2 Dave Davidson (Shipping and Logistics) Number -This is a non-functional because it is a requirement to answer the question of how the system behaves like the question on functional and non-functional concepts - This is non-functional, because it is to detail - The look and feel of the website should - This is non-function because it resemble the healthy lifestyle we are selling explain for question how the system should be? - The system should replace the current systems at our franchise centres Not appropriate high level requirements - A way for people to return items they are unhappy with Reasons Laine Conway (Marketing) Number Not appropriate high level requirements Reasons - People should be able to ask us questions about products and services so we can link them to the correct merchandise or franchise - We must ensure that people who use the This is a very detailed website can register with their e-mail address requirement, it is non-function and log in so we can have their details to send so it is low level requirement them marketing materials John Oldman (Consultant) Number Not appropriate high level requirements - For the most part we can use the system I have already written You just need to write the code to connect the database to the frontend – I’ve already created the database in MS Access - The only bit left is to add the part of the system that helps centres manage the charities 5|Nguyen Cong Tu GCH15268 Reasons This is the database connection so it explains what the system requirements are and in the request it uses the MS access database, which is a really detailed requirement 5 Paige Mc Man (Franchise owner) Number Not appropriate high level requirements - My centre has links with lots of charities and it would be great if the new system could communicate with theirs in a way If not, I need to be able to at least keep track of charity events we are involved in (when, where, who the charity is, how proceeds are managed, etc) - My centre also has a juice bar and I would like to be able to manage my stock levels of fresh fruit and vegetables for smoothies and juices, so I can order items from the local supermarket before I run out Reasons - I need to be able to order items from the central office to sell in my store - Could I ship online orders in my area and get Sai the money for those sales? 6.Sue Thompson (Franchise owner Number Not appropriate high level requirements - Clients can use the system like Facebook, to communicate with each other and build an online community They should be able to find out who are in their classes and contact those people Reasons B1.2 Rewrite, and add to, the list to end up with a total of 10-12 high level requirements that you feel are required for building the system Briefly justify the need for each of your high level requirements against information you have gathered from the case study After I was identified a list not appropriate high level requirements , it is not easy Here is the list to end up with a total of 10-12 high level requirements that I feel are required for building the system Number High level requirements - Customers must be able to log in 6|Nguyen Cong Tu GCH15268 Reasons Customer can log on to the system as necessary because the system needs to track their members, classes and programs so the system needs to have a login for the user - Customers must be able to buy things - Customers must be able to search and Customers can buy products or browse products to buy, whether they are search for products without a logged in or not login, which is essential because Ben is highly regarded for online sales even though the centres disagree about it - I want to be able to see management This request is very necessary reports of online product sales, and compare because Ben wants to review these to sales at the centres themselves all sales data - The system should allow centres to order marketing materials -The system should allow centres to order products for their local stores - The only bit left is to add the part of the system that helps centres manage the charities - We need to ensure that a bookkeeping service is built into the new system, as this will make my job easier - My centre also has a juice bar and I would like to be able to manage my stock levels of fresh fruit and vegetables for smoothies and juices, so I can order items from the local supermarket before I run out 10 11 12 13 This is a high level requirement because it is a very necessary requirement for the system This is a requirement for the system to manage its charitable activities - I need to be able to keep track of my clients, This is a high level requirement allow them to make bookings for classes because the system needs to online, and pay their membership fees properly manage its customers along with their online booking and paid membership fees - Clients can register and log in on the The customer can register and website, and they can pay their membership log in to the system as high fees, book classes at my centre, join clubs at level requirement because it is my centre, etc the way the customer can interact with the system and help the system can manage the data from them I can keep track of my staff and what classes they teach I can use the system to pay my staff B2 Use the MoSCoW rules to prioritise the requirements in your updated ‘high level requirements list’ 7|Nguyen Cong Tu GCH15268 B2.1 Produce an updated ‘high level requirements list’ clearly showing the prioritisation you have given to each of your requirements There is no word limit for answer B2.1 Explain MoSCoW : The MoSCoW method is a prioritization technique used in management, business analysis, project management, and software development to reach a common understanding with stakeholders on the importance they place on the delivery of each requirement; it is also known as MoSCoW prioritization or MoSCoW analysis Must have for the requirements that are fundamental to the system and it is also important requirements in a system it accounts for 60% of your efforts Should have for important requirements that would probably be classed as mandatory in a less timeconstrained environment Could have for requirements that can more easily be left out of the increment under development Want to have but will not have this time round for those valuable requirements that can wait until later development takes place Number 10 High level requirements - Customers must be able to log in - Customers must be able to buy things - Customers must be able to search and browse products to buy, whether they are logged in or not - I want to be able to see management reports of online product sales, and compare these to sales at the centres themselves - The system should allow centres to order marketing materials -The system should allow centres to order products for their local stores - The only bit left is to add the part of the system that helps centres manage the charities - We need to ensure that a bookkeeping service is built into the new system, as this will make my job easier - My centre also has a juice bar and I would like to be able to manage my stock levels of fresh fruit and vegetables for smoothies and juices, so I can order items from the local supermarket before I run out - I need to be able to keep track of my clients, allow them to make bookings for classes online, and pay their membership fees 8|Nguyen Cong Tu GCH15268 Lever 11 12 13 - Clients can register and log in on the website, and they can pay their membership fees, book classes at my centre, join clubs at my centre, etc I can keep track of my staff and what classes they teach I can use the system to pay my staff B2.2 Explain how you set about prioritising the requirements and justify your reasons for the decisions that you made Your answer to B2.2 should be in the region of 500 words Section C- Legal, Social, Ethical and Professional Issues C1 Management Summary for Obligations of the Data Controller C1.1 Role of a Data Controller The GDPR guidelines explain the terms of the GDPR to help organizations comply with the requirements of the GDPR It is for those who have daily responsibility for data protection These principles are similar to those of the Data Protection Act 1998 (Act 1998) Data controllers are the type Information commissioner is responsible for dealing with data subject types, data types, processing purposes and other parties whose data will be disclosed Data controllers must follow the eight principles of DPA DPA involves the protection of data objects from misuse of their personal information GDPR is part of data protection in the UK, in conjunction with the new Data Protection Act 2018 (DPA 2018) The key terms of this article apply, like the GDPR, from May 25, 2018 This guide refers to DPA 2018 where it relates to links to relevant sections of the GDPR itself, to other ICO guidelines and to guidance provided by the EU Article 29 Working Party - now is the European Data Protection Board (EDPB) Because Alive is a health-care brand and a health-related organization, it is also a very charitable organization Therefore, the company must have a database manager for the company's membership information, as the company is also a charity and hence the personal data of each member of the organization will is connected (shared) with third parties and government agencies Therefore, in order to manage good personal data, Alive must adhere to the eight principles of the Data Protection Act (DPA) Here are the issues that the data controller in Alive must perform to properly collect and share personal information in accordance with the DPA guidelines Principle 1: Lawfulness, fairness and transparency (1) “Personal data shall be: Processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness, transparency’)”2 https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulationgdpr/principles/lawfulness-fairness-and-transparency/ 9|Nguyen Cong Tu GCH15268 For example: "Collecting enough information from members in ALive is very important because it helps the company manage its members' information in the best way possible, but must be clear, honest, and open with all the personal data you use" Principle 2: Purpose limitation (2) “Personal data shall be: Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1), not be considered to be incompatible with the initial purposes.”3 For example :Alive must at times share data with the organization about the personal information of the group members to charitable activities so the data controller in Alive needs to check the government agencies or the party You need to use data for what to and use your personal data for what purpose All personal data is only shared for legitimate purposes It is possible to use and share personal data For new purposes, but must be compatible with your original purpose Principle 3: Data minimisation “(3) Personal data shall be: Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (data minimisation)” For example: All data and personal information collected by Alive will be required for the purposes of the Company Alive also needs to regularly review the stored data and delete everything they not need Principle 4: Accuracy “(4) Personal data shall be: Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’)”4 For example: Because Alive is a company that also sells and to customers and members of the center register and log in to the system all the information of customers or members are confidential information so the main the information is very high You must ensure the accuracy of any personal data of the customer or the member of the organization There should be appropriate procedures and this process should determine when the system https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulationgdpr/principles/purpose-limitation/ https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulationgdpr/principles/accuracy/ 10 | N g u y e n C o n g T u G C H updates the data to perform properly The purpose the system needs and record that data source Principle 5: Storage limitation “(5) Personal data shall be: Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’)”5 Personal database of customers or members of Alive is not kept for too long You have an excuse to keep your personal data for a longer time but this depends on your purpose Personal information can be erased or anonymized when you no longer need it Principle 6: Integrity and confidentiality “(6) Personal data shall be: “Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).” For example: The "integrity and security" principle of the GDPR is that you must ensure that adequate security measures are in place to safeguard personal data that Alive has done You need to process personal data safely The GDPR will give you more specific details of what you need to to secure you’re processing and how you should evaluate your information risk and put appropriate security measures in place C2 Management Summary for Purpose of the BCS Code of Conduct https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulationgdpr/principles/storage-limitation/ 11 | N g u y e n C o n g T u G C H ... I have already written You just need to write the code to connect the database to the frontend – I’ve already created the database in MS Access - The only bit left is to add the part of the system... 5|Nguyen Cong Tu GCH15268 Reasons This is the database connection so it explains what the system requirements are and in the request it uses the MS access database, which is a really detailed requirement... relationships Alive systems are business systems so using the DSDM (Dynamic System Development Method) In this case will focus on business needs Deliver on time We can use Timebox to plan ahead