A risk assessment of information security in a diet centre business: a case study

This paper employed the framework of Operationally Critical Threat, Asset, and Vulnerability Evaluation Allegro (OCTAVE-Allegro) to analyse the key risks and challenges faced by the business of Diet Centre X, particularly in terms of security, operational efficiency, and customer trust. The primary concerns identified include data input errors, outdated billing systems, weak password management practices, and a lack of comprehensive security awareness training. These issues pose significant risks to the centre’s productivity, financial health, and reputation. Contributions of this paper include the proposal of several lessons learned and solutions: creating a customer registration system that is connected to the client data validation in the management system, along with implementing a validation for all input fields to reduce human errors and upgrading the billing system to remove outdated payment methods and enhance the user interface, and conducting quarterly security awareness training for all employees to increase their preparedness against potential security threats.

This is an author produced accepted manuscript version of a conference paper included in this repository with permission. The final paper is published by SCITEPRESS as: Annahdi, T., Alkubaisy, D. and Piras, L. (2025). A Risk Assessment of Information Security in a Diet Centre Business: A Case Study. In Proceedings of the 20th International Conference on Evaluation of Novel Approaches to Software Engineering - ENASE; ISBN 978-989-758-742-9; ISSN 2184-4895, SciTePress, pages 858-867. DOI: 10.5220/0013488300003928