The goal of this project is to improve the Cybersecurity of our company. We have our own risks as a business - but also our clients, who we would love to upskill. ProfileTree is a leading Web Design and Development Agency with clients around the world. We develop high-performing websites for clients - as well as have our own portfolio of websites.

The project could be split into 4 main components we would love to tackle in different projects / with different teams (I am NOT a cybersecurity expert - hence open to anything that would help us improve this critical area for the digital world today!) :

1. Cybersecurity Audit Checklist: Students could develop a comprehensive cybersecurity audit checklist that our team can use quarterly to self-assess and enhance our security measures. This checklist should cover various aspects of cybersecurity, including network security, information security, application security, and operational security. Upon completion, we aim to publish this checklist on our website and share it with our clients, serving as a valuable resource for anyone interested in improving their cybersecurity.
2. Penetration Testing: We would appreciate assistance in conducting a 'pen test' on our website. This process involves simulating a cyber attack to identify vulnerabilities in our system that a hacker could exploit. We are particularly interested in any feedback, advice, or coding solutions that can help us further fortify our website's security. The knowledge gained from this exercise will also be applied to the websites we develop for our clients, thereby enhancing their cybersecurity as well.
3. Cybersecurity Training Module: Finally, we believe that security awareness among our team members is crucial in maintaining a robust cybersecurity posture. To this end, we would like assistance in developing a beginner-friendly training module to educate our team about basic cybersecurity practices. This resource will also be made freely available on our website for our clients and the public to use.
4. Resource Creation / Cybersecurity Resource Hub: The team could help us populate a dedicated section of our website with a wealth of cybersecurity content. This could include educational articles, up-to-date news, guides, statistics, and case studies related to cybersecurity. The aim is to provide an engaging and informative space where visitors, including our own customers, can educate themselves about the importance of cybersecurity, understand current threats and trends, and access resources to help them improve their own security measures.

This project offers students a unique opportunity to apply and expand their knowledge in a real-world setting while making a significant contribution to cybersecurity awareness and readiness at our business. As mentioned - we are open to other ideas in cybersecurity that we have not considered.

Project Output:

At the end of this project, we hope to have a number of student groups help us create the following:

• A comprehensive cybersecurity audit checklist that businesses can use for self-assessment
• A detailed report from a penetration test conducted on our website, with recommendations and potential solutions for identified vulnerabilities
• An engaging and easy-to-understand cybersecurity training module for team members and the wider public
• Cybersecurity resources, guides, how-to - basics for a business owner to understand.

Through this project, we aim to enhance our cybersecurity measures, help other businesses do the same, and foster a culture of cybersecurity awareness within our team and the wider community. This will involve several different steps for the students, including:

- Conducting a security audit of the existing systems and networks.

- Developing a comprehensive security plan for the company.

- Identifying and assessing potential security risks.

- Make suggestions on implementing security measures such as firewalls, antivirus software, and encryption.

- Developing policies and procedures to ensure the security of the company's data.

- Helping train staff on security protocols and best practices.

In 2022 we engaged an external CyberSecurity company that audited our business and supported us with implementing security measures, including software and other aspects of improvement. We appreciate this is a student project, but do still believe that "fresh eyes" and ideas will only add to what we have done and plan to do in-house - thus, we will add another valuable lawyer to what we are doing in this area.

To achieve the project goals, students will engage in a variety of tasks that will showcase their understanding of cybersecurity, their ability to assess and mitigate risks, and their capability to develop user-friendly resources.

1. Cybersecurity Landscape Analysis: Students will need to familiarize themselves with your existing digital infrastructure and evaluate potential vulnerabilities. This will require a deep understanding of various network systems, website structures, and common cybersecurity risks.

2. Security Audit Development: Based on their analysis, students could develop a comprehensive cybersecurity audit checklist. This task involves translating a technical understanding of cybersecurity into a practical tool that non-technical staff can use to evaluate and improve security measures.

3. Penetration Testing: Students could perform a 'pen test' on your website to identify and understand potential vulnerabilities. This will require the application of advanced cybersecurity skills and tools, as well as the ability to document the process and findings clearly.

4. Resource Development: Students could develop a beginner's guide to cybersecurity, resources, statistics and case studies to populate a dedicated online cybersecurity resource hub. This will involve creating engaging, accessible content that effectively communicates complex cybersecurity concepts and practices.

5. Training Module Creation: Students could help develop a training module that can effectively educate staff about cybersecurity protocols and best practices. This task requires an understanding of educational design principles, as well as the ability to communicate technical information in an accessible manner.

• A detailed kick-off call to go through the project
• Supply any information that is required
• A planned weekly 1-hour zoom/team call to review the project process, provide feedback and answer any questions

If additional support is required, this will be provided.