Assess the information security situation in a small business eg. a restaurant and make recommendations for improvements.
1. What are the main categories of information assets that have to be protected?
2. What are the main threats to and vulnerabilities of these information assets?
3. Which control measures (if any) are used to protect the information assets?
4. What recommendations (if any) can you make to improve the information security situation of the organisation?