This project was an internal review of an organization’s security systems. I was tasked with evaluating the risks of a vulnerable information system and outline a remediation plan for a small business - an e-commerce company. 

The company stores information on a remote database server, since many of the employees work remotely from locations all around the world. Employees of the company regularly query, or request, data from the server to find potential customers. The database has been open to the public since the company's launch three years ago. 

As a cybersecurity professional, I recognize that keeping the DB server open to the public is a serious vulnerability.