You currently work in the IT department of a loyalty services provider called BuyGood. Many other businesses sign up for BuyGoods loyalty program as a way to gain better insights into their customers shopping behaviours. These businesses encourage their customers to use BuyGood regularly in return for incentives such as discounts on their purchases and occasional free items. In return, BuyGood provides these businesses with insights about shopping trends, behaviours, and forecasts. For various reasons, BuyGood has not had a strategic position about its cybersecurity and therefore, has not hired dedicated cybersecurity personnel and/or created a cybersecurity department responsible for protecting against cybersecurity incidents. T In light of some recent cybersecurity breaches in Australia and overseas, BuyGood realises that it needs to improve its cybersecurity position. Your manager knows you are very interested in all things cybersecurity, and as a graduate of UNSW, she knows you have all the right credentials to advise BuyGood about their way forward with cybersecurity. She has suggested that you be appointed as their cybersecurity advisor. You have been asked to provide a briefing paper to your manager to enable her to update senior executives of BuyGood about their cybersecurity position and what they should do to protect their operations. Your manager needs to update the board in three hours so your answers must be

1. Most businesses often implement their cybersecurity responses based on some form of risk assessment that identifies high risks and low risks. Give ONE (1) example of each of the types of risks for BuyGood that can be considered high risk and low risk.