This report discusses a security policy for Coles Supermarket to protect its internal networked systems. It covers the nature of information collected, policies regarding collection and holding of personal information, purpose of handling customer information, digital services, identification of potential threats and vulnerabilities, and mitigation actions.