You currently work in the IT department of a loyalty services provider called BuyGood. Many other businesses sign up for BuyGoods loyalty program as a way to gain better insights into their customers shopping behaviours. These businesses encourage their customers to use BuyGood regularly in return for incentives such as discounts on their purchases and occasional free items. In return, BuyGood provides these businesses with insights about shopping trends, behaviours, and forecasts. For various reasons, BuyGood has not had a strategic position about its cybersecurity and therefore, has not hired dedicated cybersecurity personnel and/or created a cybersecurity department responsible for protecting against cybersecurity incidents. T In light of some recent cybersecurity breaches in Australia and overseas, BuyGood realises that it needs to improve its cybersecurity position. Your manager knows you are very interested in all things cybersecurity, and as a graduate of UNSW, she knows you have all the right credentials to advise BuyGood about their way forward with cybersecurity. She has suggested that you be appointed as their cybersecurity advisor. You have been asked to provide a briefing paper to your manager to enable her to update senior executives of BuyGood about their cybersecurity position and what they should do to protect their operations.

Identify the areas where their network could become vulnerable to potential threat actors.

Your answer must:

a. Clearly identify TWO (2) network vulnerabilities

b. Provide clear explanations of these vulnerabilities