Question

IT (Information Technology) Case

ABC Company is a retailer with an Ecommerce presence and a SEC reporting company. ABC products are sold within the 48 contiguous states. Customers like ABC’s products due to their quality and loyalty program which includes several types of rebates based on a point system. Points are allocated based on purchases both dollar and volume. To become a loyalty customer, they must provide ABC with their name, phone number, address, and email address. Additionally, the customer must have a valid credit card number on file to place an order online. The credit card number is stored as part of the customer record. ABC maintains a privacy policy which is accessed on its Ecommerce site. The privacy policy is updated quarterly and complies with all federal data privacy.

What are the controls and what are the gaps in the study case.

Answer 1

Control in the company are that they are using the customer data to serve the customer with their loyalty program and point based system to lure in more customers to the company and they are able to get the details of the customer like name, phone number, address, and email address. and credit card number as well and major gap in the case study is that the company is updating the privacy policy and treating th credit card number details as the part of the custome record which should not be case as payment information are separately stored in more secure way and the privacy policy needs to be updated whenever there is a need to update the policy