ISY3006 Business And Corporation Law Assignment

Running Head: BUSINESS AND CORPORATION LAW
0
Information Security
Woolworths
1/10/2020
Student’s Name

ISY3006
1
Contents
Introduction......................................................................................................................................2
About Woolworths...........................................................................................................................2
Security Policy of Woolworths........................................................................................................2
Information Security Policy 3
Potential threats and vulnerabilities of the company's network.......................................................6
How such threats and vulnerabilities can be mitigated...................................................................8
References......................................................................................................................................10

ISY3006
2
Introduction
In the world full of competition and advancement, businesses are using technology in different
areas and activities to make the process fast and efficient. The use of technology brings many
risks and threats to the data and people involved in the process and therefore the topic of
Information security is being an important part of discussion and implementation (Moore, 2019).
The presented report is based on a similar topic where Woolworths has been selected as an
organization of choice. In the presented report, a strategic information security policy will be
developed considering the nature and stakeholders of the organization. Further, the threats and
vulnerabilities of the network, as well as the manner in which such threats can be mitigated will
also be discussed. Lastly, a conclusion will be drawn upon containing a summary of the report.
About Woolworths
It is an Australian supermarket company that has it’s headquarter situated at Bella Vista,
Australia (Woolworthsgroup.com.au, 2019). Key stakeholders of the company are customers,
employees, suppliers, communities, shareholders, and debt funders. The company is mainly a
food retailer but also includes other products such as clothes, grocery products, furniture, and
other daily life products. Woolworths is the largest supermarket chain in Australia. Across
Australia, the company has 995 stores (localz.com, 2019). The supermarket is working well for
its customers sourcing 100% of fresh meat and 96% of fresh fruits and vegetables from
Australian farmers and growers.
Security Policy of Woolworths

ISY3006
3
Information security policy can be understood as a set of rules enacted by an entity that ensures
that all the networks and users of an IT structure are abide by the regulations with respect to data
security (resources.infosecinstitute.com, 2018). This policy lets the users of the IT structure
know the appropriate manner of use. In addition to this, the policy also highlights the
information and data, which need to be secured. After research and formulation, a security policy
of the company has been designed considering nature and stakeholders of Woolworths. The
policy is documented below:
Information Security Policy
1. Overview
This policy contains an integrated set of protection measures that apply to all the Woolworths
personnel to ensure that the information system of Woolworths is secured and free from any
unsecured and unauthorized access. The subjective system carries information related to the
organization, its customers, employees, and all other stakeholders. To maintain cash flow,
competitive edge and company image, the availability, confidentiality, and integrity of the
information security system is essential. The three main objectives of this policy are as follow:-
 Availability: To ensure that the system and information are available to the authorized
users whenever they needed.
 Confidentiality: To keep all the information private and not to give access of the same to
any unauthorized user
 Integrity: - To ensure the timeliness and accuracy of all the information.
The policy has the aim to provide the Woolworths an approach to managing informational risk
and guidelines to protect information assets.