Introduction

For many people their first job is in the restaurant or service industry. This makes it vital to train employees on basic practices to create a more secure environment

Restaurant Computer Environments

Computers are just as essential to running restaurants as employees. Most orders are taken through POS devices. Credit card readers use computers, and most management duties are completed using a back-office computer. Overall networks in restaurants and retail stores are much more complex than most people would assume. Each device in the network represents a different security risk. In this particular environment rouge USB devices present a big risk to systems.

The Biggest Threats

  1. Employees. Employees need to be trained on best practices as well as have access to only the data and resources they need to do their job. Manager key cards and passwords shouldn’t ever be given to other employees.This is an image of an Employee Handbook.
    1. NEVER plug a USB device into company systems
    2. Never give out door codes or passwords to co-workers or family members
    3. Dispose of sensitive information in a secure way.
  2. No policy. Having cyber security policies and training employees on these policies is the single most important thing a restaurant or store can do to improve their security.

Ways the Systems Can Be Compromised

Phishing and vPhishing and two of the most common ways in which restaurant and retail systems are compromised. Voice phishing or vPhishing is particularly dangerous because often any employee can pick up the phone and answer it even if they are not in management and haven’t been trained on how to deal with scam callers. This can cause these vPhishing attempts to be very affective. In these environments physical system security is also often overlooked. Servers and networking devices like routers and switches may not be secured in a cabinet creating a risk that an employee could compromise a system.

Service Industry Cybersecurity

  • Cyber Security doesn’t seem like it would be very important in the restaurant or service industry. However, keeping systems secure in these industries is just as important as keeping home or office networks secure.
  • Service jobs can be easy targets for attackers because a lot of people don’t think of these jobs when discussing cyber security.

Conclusion

The restaurant and service industry requires a surprising amount of computers and connections in order to run effectively. This makes these businesses very vulnerable to cyber criminals. This vulnerability is only amplified by the fact that cyber security often gets overlooked in these industries and businesses end up without proper plans and policies to stop cyber crime. The biggest ally to preventing cyber crime is training employees on these dangers and eventually implementing a cyber security policy.

Creating and maintaining good cyber security policies in restaurant and service industry jobs can create a great foundation in security for individuals entering the workforce.

 

References

https://www.cisa.gov/publication/national-cybersecurity-awareness-month-publications