Scenario:

You have been hired as an information security analyst at a small company called Auto Premiums,

which sells cars online. Auto Premiums owns and hosts its IT assets and forward$-$facing web

applications onsite. The assets are about $5$ years old, and the company seeks to expand its

operations in the next $5$ years.

When existing or potential customers go to the Auto Premiums webpage to shop for cars, they are

informed that the website collects cookies. Website cookies are small text files stored on visitors'

computers when visitors view a website. The cookie files are updated if the visitor returns to a

webpage on a subsequent visit. The company uses cookies to remember visitors to the webpage

and understand ways to enhance the visitors' experience. Cookies are also used to provide access

to a visitor's account profile if the visitor has created a profile with the company.

If a customer orders a car, Auto Premiums collects the customer's name, address, telephone

number, email address, and credit card information to process the sale transaction. Of course, to

process the sale, the car; s make and model, and the price are documented and added to the

customer's transaction history record. All of this information is stored in the customer's account

profile, which is stored in the company's customer database.

The company wants to expand the number of cars it offers to its customers. Auto Premium sales

team is researching whether different categories of customers are more or less likely to buy high$-$

end electric cars. The sales team would like to collect the following information from visitors to

the website to figure out what cars the company should stock:

Customers level

Education level

Employment status

Veteran status

Whether a person is left or right$-$handed

How many times a month a person eats a meal at a restaurant

Q$1)$ Identify the personal information that the company is already collecting from customers

O$2)$ Identify the personal information that the company is collecting from visitors to its website