Chapter 2 — Information at a garden centre business
Lesson map
Lesson 02 published. Map, example, EX005.
flowchart TD
N0["Learning outcomes"]
N1["2.1 What Westfield holds"]
N2["2.2 Why it matters"]
N3["2.3 Where it is kept"]
N4["2.4 Who uses it"]
N0 --> N1 --> N2 --> N3 --> N4
N4 --> EX["Worked example"]
EX --> Q["Exercise EX005"]
Logical drawing
flowchart LR
N0["Learning outcomes"]
N1["2.1 What Westfield holds"]
N2["2.2 Why it matters"]
N3["2.3 Where it is kept"]
N4["2.4 Who uses it"]
N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX005"]
[Learning outcomes]
|
v
[2.1 What Westfield holds]
|
v
[2.2 Why it matters]
|
v
[2.3 Where it is kept]
|
v
[2.4 Who uses it]
|
v
[Worked example] --> [Exercise EX005]
Learning outcomes
You will (1) list the information a small retailer holds; (2) say why each kind needs protecting; (3) note where it is kept.
2.1 What Westfield holds
Chloe lists Westfield's information: loyalty scheme members' names, emails and purchase histories; online shop orders with delivery addresses; card payments at tills; staff records and rotas; supplier invoices and bank details; and stock records. Mr. Appiah asks her to think about which would cause most harm if lost, changed or seen by the wrong person. She thinks customer details and bank details come first, because misuse could cause fraud or embarrassment for customers and staff. She records each type of information in a simple table with its users.
2.2 Why it matters
Chloe learns the three goals of information security: keeping information private, keeping it accurate and keeping it available when needed. ISO/IEC 27000:2026, the overview standard for information security management, describes security in these terms. At Westfield, loyalty data must stay private, supplier bank details must stay accurate so payments go to the right place and tills must stay available on busy weekends. She writes one Westfield example for each goal in her notebook. Mr. Appiah asks her to add an example of what could go wrong for each goal.
2.3 Where it is kept
Chloe traces where information lives. Loyalty and online shop data sit in a cloud service. Card payments go through the payment terminals to the card company. Staff records are in a payroll service. Supplier invoices arrive by email and are saved in a shared folder. Rotas are printed and pinned in staff rooms. She finds a printed customer delivery list left on a counter at one centre. She tells the centre manager, who moves it to the office. She adds a location column to her table.
2.4 Who uses it
Chloe notes who needs each kind of information. Till staff need prices and loyalty lookups, but not staff records. Delivery drivers need addresses for their own deliveries only. The office manager needs supplier bank details. Mr. Appiah explains that knowing who needs what is the starting point for deciding who should have access. Chloe sees that Westfield's shared folder can be opened by every staff account, which gives many people access to invoices they do not need. Mr. Doyle agrees to restrict the folder to office staff.
Worked example
Chloe lists Westfield's information, links each type to privacy, accuracy or availability, traces where it is kept and finds an over-shared folder.
Synthetic case. Information types are synthetic.
Errors and limits
Printed customer lists left on counters can be read by anyone passing.
Exercises
- EX005 — Three goals. What are the three goals of information security? Rubric: 3 = private, accurate, available;; 2 = all;; 1 = some;; 0 = none.
- EX006 — Bank details goal. Which goal matters most for supplier bank details? Rubric: 3 = accuracy;; 2 = partly correct;; 1 = other;; 0 = none.
- EX007 — Counter list. What did Chloe find on a counter? Rubric: 3 = a printed customer delivery list;; 2 = partly correct;; 1 = vague;; 0 = none.
- EX008 — Folder problem. What is wrong with the shared folder? Rubric: 3 = every staff account can open it;; 2 = partly correct;; 1 = vague;; 0 = none.
Continue studying — lesson 02 (chapter 02 of 18)
← Chapter 01 · Course chapter index · Chapter 03 →
Continue to the next authored lesson.