Food Truck operators are small, independent businesses that don't always have the same access to resources and materials of other businesses. Yet, many use the same types of systems which can suffer the same or greater exposure to vulnerabilities, especially without the proper precautions.

For this project, we're looking to create a written guide that will be digitally distributed to food truck operators as a best practice guide to understanding their use of web access services, including mobile and hotspot security, as well as the security of their POS and payments systems. Students will gain a thorough understanding of a mix of systems in use within a food service business, and can recommend best practices for the food truck operators to avoid fraud, while also protecting data (or refraining from unnecessary data collection and storage) in order to reduce their overall risk.

While we will leave the structure of the guide to the students to create, possible topics should include the most relevant topics from sources such as:

• https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/pipeda-compliance-help/guide_org/
• https://www.antifraudcentre-centreantifraude.ca/scams-fraudes/business-entreprise-eng.htm
• https://www.pcisecuritystandards.org/merchants/
• https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Supporting%20Document/PCI_DSS_Glossary_v3-2.pdf
• https://www.fsrmagazine.com/expert-takes/how-protect-your-restaurant-against-data-breach (prefer Canadian sources, but all relevant source material should be considered)

The final outcome should be well-researched and laid out guide(s) in document formats that use approachable language for non-technical individuals to better understand their risks, and should include actionable steps to avoid risk in their business.

Design is not required.

We will provide a dedicated team member to facilitate feedback and answer any questions for students. We are able to commit to:

• Providing written or presented overviews to the class
• Providing time for answers to questions from the students or the professor
• Providing feedback to students on any draft materials, and providing guidance as required
• Providing final feedback to the professor and to the students on the final deliverable

In addition, we would fully support the opportunity to:

• Highlight the school and students' participation in a distributed press release (optional/with your approval)
• Provide attribution of the creation of the guide to the students and the school for its involvement
• Highlight the students' work up on the Guide's release to Association members and audiences

We will provide access to our organization's instance of Slack, so that we can easily and readily converse and share resources for review. We are also happy to use project management tools (i.e. Trello).