The main goal of this project is to plan, implement, manage, monitor and upgrade security measures for the protection of The Clean Divorce's data, systems and networks.

The Clean Divorce (TCD) is a small and growing family mediation company helping families through one of the most challenging times of their life - divorce. TCD works with highly sensitive client information. We currently operate our website and client intake forms on Wix and want to ensure that our systems and processes meet strong cybersecurity and IT security standards.

As part of this project, we would request a cybersecurity assessment of our existing Wix environment to identify vulnerabilities, risks, and compliance considerations, and provide recommendations on:

• Whether Wix meets industry-standard security requirements for storing sensitive client data.
• Layered security measures that could enhance Wix’s existing safeguards.
• Alternative secure data storage platforms (and their integrations with Wix) if Wix is insufficient for our needs.

We would also request a develop a Cybersecurity & IT Security Guideline tailored for a small professional services firm. This document will include:

• Best practices for protecting sensitive client data.
• Recommended response times and processes in case of a breach.
• Security parameters (e.g., password policies, encryption standards, secure communications).
• Day-to-day IT security protocols to ensure consistency and compliance.

Student value:

• Gain hands-on experience with a start-up, conducting a real-world security assessment on a live business platform.
• Apply your knowledge of cybersecurity frameworks, IT governance, and secure architecture in a professional context.
• Build a portfolio piece that demonstrates your ability to evaluate systems, propose solutions, and create professional documentation. 
• Learn about the unique security challenges faced by small businesses handling highly confidential data.  
• Deliver work that will have a direct, lasting impact on the safety and trustworthiness of a real organization.

This will involve several different steps for the learners, including:

• Analysis of the existing security measures of The Clean Divorce and offer suggestions for our security policy and areas of improvement
• Researching other security measures and systems that can be implemented
• Review the process for vulnerability testing and help develop any best proactive policies to keep up with the current cybersecurity landscape and provide customers with confidence that their data will remain safe at all times.
• Detecting and analysing any incidents, review incident reporting, and create an incident response plan

Deliverables:

1. Cybersecurity Assessment Report (focused on Wix and integration considerations).
2. Recommendations for layered security measures or alternate secure platforms.
3. Cybersecurity & IT Security Guideline (best practices, protocols, response framework).