Cyber security

As a business based on a subscription model, to be able to use the service you need to provide important information as your card details, name, address, phone number, and email. In the digital world, websites are exposed to worldwide access and need to provide security for their users and to prevent hardware and software issues (Laudon, 2017)

The most common threat that companies like Hello fresh which stores personal information, could be identity theft which uses phishing and pharming, SQL injection attacks, or ransomware. Some internal threats as employees who have access to personal information could be a reason for a data breach. Email marketing increases the chance of fraud if the email looks legitimate but contains malware and is not sent by the source.

To implement key security controls in applications, each organisation needs to set security risk assessments for employees and customers. Firms need security policy and plan in case of disruption. Laudon (2017) recommends for quality and reliability of software to be used software metrics and rigorous software. Application control secured authorized data is completely and accurately processed, an example for this is updating payment method on the website. According to Hello Fresh website, they used application control over the payment method.

Reducing the risk of cyber attacks firms can use intrusion detection systems that detect and deter intruders continually (Laudon,2017). Companies like Hello Fresh which operates digitally and depends on online transactions need a Fault-tolerant computer system.

The company’s website state that they responsibly apply GDPR and clarify how customers’ data is stored, proceeded, used, and shared with third parties and how payment methods are secured.

Recommendation:

People who work in a company and have access to customers’ data need to sign a declaration for confidentiality.

Requesting an authentication by appearing encouraging message to be used a strong password.

Hello Fresh does not provide full accessibility options but has an announcement stating their goal this to be improved.