Integrated e-enterprise security design and implementation: a case study of e-service in supply chain management

Web technology has enabled many organisations to form an e-enterprise for effective communicating, collaborating, and information sharing. To gain competitive advantages, it is necessary for e-enterprises to integrate the entire lines of business operations and critical business data with external organisations or individuals over the web, which may introduce significant security risks to the organisations' critical assets and infrastructures. This paper reports a case study of e-service security design and implementation at a leading US company. The paper first reviews security concerns and challenges in front-end e-business and back-end supply chain operations. This is followed by the analysis of the company's e-service and its security problems. The case then presents an integrated e-enterprise security methodology that has guided the company to meet its security needs. The results of this case study provides security professionals with practical steps and sustainable solutions for tackling the unique security challenges arising in an open, unbounded e-enterprise supply chain environment.