Customs Declaration Processing System Detailed User and ...

DETAILED USER & TECHNICAL REQUIREMENTS FOR CDPS
AND USE-CASE MODELS
Ref: PHASE V
Number
SR-0080
SR-0090
SR-0100
SR-0105
SR-0110
SR-0120
SR-0130
SR-0200
SR-0210
SR-0220
SR-0230
SR-0240
SR-0270
SR-0280
SR-0300
SR-0310
SR-0320
SR-0330
SR-0340
SR-0350
Description
It must be possible for MCA to define User Access Policies according to
functional rules.
All security relevant events must be audited.
The time standard used for auditing is Greenwich Mean Time.
CDPS must address the requirements to maintain an audit trail of all changes to
data based on user requests. Proper logs should be maintained in a secure
manner for audit of transactions recorded, changes made to data and queries
initiated against end-user request with timestamps to enable examination of the
audit trail at a later date. In addition, CDPS must provide the functionality for
secure management and access to log files maintained on-line and off-line.
Workstations must be capable of being uniquely identified.
A listing (report) must be maintained including all MCA Workstation IP
addresses, their software revision and the group they belong to.
A listing (report) should be maintained including all system users, their access
profile, Workstation and Workstation group.
A firewall should be put in place between the MCA and the public network (e.g.
between the DTI Trader connections and the MCA Server).
User identification, user authentication, Workstation identification and access
control procedures should be implemented between the MCA server and the
Workstation components.
The NCA server should terminate the connection of a Workstation after a period
of inactivity defined in a configuration parameter.
It is recommended that only one login shall be necessary for a User to access the
different CDPS applications when pertaining to the same access rights.
IT Users must be identified (as a minimum) using user names and authenticated
using passwords.
The MCA Domain Administrator should be able to configure the events which
need to be audited in the MCA server.
Duplicate CDPS messages, including acknowledgements, should be logged,
brought to the attention of the System Administrator and discarded.
The files downloaded from Internet must be virus checked.
CDPS must address the requirement for providing multiple levels of access to
system functionality based on roles assigned to both the MCA IT staff and endusers
at any point in time. In addition, CDPS must support the functionality to
grant and revoke both permissions and authorizations to end-users in a secure
traceable environment.
CDPS must address the need for securing and safeguarding of data through
logging of ALL modifications to sensitive data
CDPS must provide the functionality for role-based security and access to data
and system functionality as well as guard against unauthorized use, copying and
transmission of data maintained in the database.
Role-based security must be an integral part of CDPS and must include an
administration component for updating and controlling access to individual subsystems
and potentially to data within the database.
By addressing the above requirements, CDPS must reduce to the absolute
minimum the need by MCA IT staff to directly access the database tables using
database utilities.
Page 142/276