Case study

Coffee! Pty Ltd, is a growing small cafe business that is opening a second site. The company started at a single location and will now be adding a second cafe. In addition, ordering was previously in person only but with this additional site, they'd like to add an online ordering system that is consistent across both locations and store customer profiles. As they prepare for the transition, they have been contemplating hiring a security consultant to advise on their network set up. Your consulting service steps forward to provide them a solution. Here are the list of devices and assets that the company already has on their local network: 1. Each location has two PoS systems which handle payments (4 total). These include a payment card reader and receipt printer. 2. Wireless internet access for customers. 3. Two laptops. 4. A database of client details, information on inventory and suppliers stored locally on one of the laptop’s with a backup on an external hard drive. 5. Sensitive company documents like payroll information, invoices and accounting files stored locally on one of the laptop’s with a backup on an external hard drive. Some client details must be kept secure (such as payment details and personal information). The company has recently hired three new employees to staff and manage the second location. The employees can access some client data but only managers can access the sensitive company documents. WRITTEN REFLECTION : Prepare a written document to the founders, explaining what a cybersecurity and risk management strategy is. Use professional English and cite industry or academic standard resources. Your report should be 750-1000 words long. In your report include the following sections. 1. What is a cybersecurity strategy and why is a cybersecurity strategy important for this business? What resources can this business leverage from Australia’s 2020 Cybersecurity Strategy to be cybersafe? 2. What is risk assessment and risk management? Why would this be an important business decision for Coffee! Pty Ltd 3. What is the NIST framework and how could it be used to develop a cybersecurity strategy for Coffee! Pty Ltd? 4. Perform a preliminary risk assessment by outlining all possible vulnerabilities, threats and impacts to the business. Rank the risks on order of priority using a risk matrix 5. Suggest methods/controls to either accept, lower, or transfer the risk.