Scenario: You are the Information Security Manager for a medium-sized retail org

Scenario:
You are the Information Security Manager for a medium-sized retail org

Scenario:
You are the Information Security Manager for a medium-sized retail organization based in Riyadh. Organizational success is based on your customers being able to purchase items securely through the company’s website. Employees regularly make purchases without following company procedures.
You have been asked to assess if there are any company vulnerabilities that may impact purchases and come up with security recommendations that may minimize any website risks, threats, and vulnerabilities.
Directions:
Write a paper that includes the following:
A description of three major risks, three threats, and three vulnerabilities that are of web hacking concerns for any security professional.
Compare and contrast best practices you would recommend to mitigate these web application risks, threats, and vulnerabilities.
Keep in mind; your assessment is being assessed on your ability to describe current risks, threats, and vulnerabilities in the retail industry in accordance with security goals. Use diagrams, where appropriate.
Deliverables:
Your paper should be 4–5 pages in length, not including the title and reference pages.
You must include a minimum of two credible sources and information from the module to support your writing. The Saudi Digital Library is a good source for resources.
Your paper must follow Saudi Electronic University academic writing standards and APA style guidelines, as appropriate.