Using all of the previous assignment information, students will present a comprehensive Cybersecurity Program that reports on the final state of their enterprise. Refer to the "Cybersecurity Program T
CYB-650: TRUECOACH 2
Cyber Security: TRUECOACH
Student Name
University Name
September 16, 2020
Company Profile
Mission
Truecoach is developed to help coaches and exercise experts save time, provide consumers with positive experience and improve their companies. TrueCoach has been developed to encourage 1-to-1 coaching in these sizes, enabling the coaches time to leave the gym and not to work in their businesses. Subject to TrueCoach 's task, the organization is trying “to help coaches save time through providing them with greater experience and improving their coaching companies.”
Vision
TrueCoach's vision is to offer a streamlined teacher to the world that provides a larger perspective of the past month or earlier, so that you can realise what consumers have or expect between implementation and execution. This helps users to plan, create and execute quickly. In order to manage the macro intakes of the consumer and chart their results in one location, the organization also strives for high-level macro targets to calculate success per consumer over time.
Objectives
Truecoach is a tech program company that began in 2015 and is headquartered in Boulder, Colorado, formerly known as Fitbot. The key objectives of the business are to associate online customers with a coaching platform that remote links instructors to customers that relies on the cell entries available. Another main aim is to ensure that the software product guides coaching effectively to ensure a total desktop network that best utilizes their software program, where consumers can literally and easily work together on their mobile or laptop computer in dialogue with their coaching for workout and training results. The marketing ideas, however, to prepare products which are to be used as templates to classify individual customers. In addition to this program, this program includes a bundle of training procedures built autonomously to enrich anyone signing up and joining the fitness program TrueCoach.
How it fits into the Industry
TrueCoach software suits the health and fitness industry, as it offers a free form coaching model that helps you to pack more nuanced fragments while having a perfect organizational preparation loop for different weeks of numerous individual exercise courses. It suits the market as well as offering indicators to those using the app, a particularly distinct feature of the platform from other online coaching systems. The requirements are well matched with various coaches that use the platform and continue to upgrade and evolve to enhance the skill and knowledge of scheduled exercises (“TrueCoach Reviews”, 2019). Furthermore, the company dramatically enhances the user service by establishing a streamlined mechanism that makes it easy to access workouts, via message mechanism, demo videos for different movements and others can quickly upload their videos to check them.
Main offerings, Services and Consumer Base
The key offering of TrueCoach is to develop and deliver resourcefully a pool of coaching programs for numerous coaches which then teach their customers to save their time by assisting coaches with their expertise. TrueCoach systems provide but are not limited to a range of services: customer care, in which the framework can handle all available customers and their daily training sessions on one network (Alsaleh 2017). This makes it perfect to sign new consumers, to include tailored fitness techniques and schedules, to track their success and to maintain contact.
The other deal is to develop a curriculum that designs a new set of training sessions for customers through TrueCoach systems to construct plans and adapt them according to their needs without having to re-establish the same software daily. The other service consists of dietary monitoring, which determines high level command targets and monitors improvement on a particular single customer basis within a specified timeline (Alsaleh 2017). In addition, the device will track customers' usage of macronutrients and calculate their progress over time at one site. Their key customer base is coaching practitioners and fitness firms who buy their services online.
Departments
Administrative & Management
“Casey Jenks
Casey is the Cofounder and Chief Executive Officer of Truecoach and focused on the distribution of trainers and wellness services for consumers worldwide.
Robbie Jack
He is Co-founder and CEO of TrueCoach responsible for all TrueCoach marketing strategies.
Alex Ford
He is a Computer Engineer cum Web Developer.
Emilie Hester
Emilie is a frontend developer at TrueCoach
Webb Henderson
Webb is a product design Lead at TrueCoach
Kate Alexander
She is the Vice-President of Customer Success at TrueCoach
John Covele
John is the Lead iOS Developer at TrueCoach
Hannah Deutsch
Hannah is the Customer Success Manager at TrueCoach
Sam Pogue
Sam is the Vice-President of Brand at TrueCoach
Kyle Pomerantz
Kyle is the Customer Success Manager at TrueCoach
Jeff Smith
Jeff is the Vice President of Engineering at TrueCoach
Kate Yzquierdo
Kate is the Director of Operations at TrueCoach
Joey Mazzotta
He is the Product Designer at TrueCoach
Nolan Parker
He is the Customer-Support Specialist
Lina Gonzalez
She is the Senior Designer at TrueCoach”
TrueCoach IT Infrastructure
The Truecoach IT architecture is based on the IaaS and the SaaS infrastructures (Internet as Service). By offering its services on this service-based basis, all infrastructures fulfil the company's needs to the different customers. Nearly all TrueCoach products are Internet-based with a software-based management system. Most of the functionality is built on iOS. The hardware system contains servers, desktops and TFT displays in Boulder, Colorado 's central office.
Cloud based on Amazon Cloud Services, TrueCoach Datacentres provide Amazon Web Services ( AWS). This helps them to build specialised coaching programmes that provide greater flexibility, reliability and scalability.
Flow of Information and Decisions at the Executive, Business/Process, Implementation/Operations Levels
Executive Level
They express the mission and vision goals of the organization, the tools available within the organization and the overall risk toll on the whole system of operation / operation.
Business/Process Levels
The information is then used in a risk assessment framework by the assessment to clarify the company needs and to incorporate these by interacting with the stage of execution / operations in order to create business integrity.
Implementation/Operations Levels
They convey developments and updates on the critical market needs to the stage of company / implementation.
Framework Core
ISO/IEC 27001 Cybersecurity Framework Alignment
Through detailed structure, description and recording of their methods of risk management, TrueCoach has fulfilled all the criteria of ISO / IEC 27001. This has been done with the risk assessment of the known information assets, the unbearable threats and the mitigating strategy and residual risk management by means of essential policies, procedures, strategies and controls.
Organizational Effort and Needs Priorities
Priority Goals
TrueCoach Operational activities cover three categories: executive level, market level and strategic level. The three have made the brand publicly accessible, whilst continuing to overcome dynamic problems and their priorities by overhauling the short and long-term growth expectations.
Priority Needs
The main challenge for these businesses is for all groups and teams to step in the same direction with a shared purpose that is very difficult to accomplish. It's almost impossible without an organizational strategy (Barrett 2018). The other criteria for business was to establish strategic business goals that can set and describe success while displaying actions that can help the organization accomplish its objectives.
Elements of Cybersecurity Risk and Mitigation Strategies
Since TrueCoach uses a pay-per-use access model to account for its clients to provide protection such as ubiquity, elasticity, scalability and the availability of productive services for enterprises, the company faces massive cyber security vulnerabilities and dangers. Include: Minimal Innovation Debts and will spot patchable vulnerability flaws as the lead technical team creates and updates the coaching program. More exacerbating the debt in engineering and the insecurity of the company. However, binary scanning that provides notifications of important sensitive threats will alleviate this. Computer exploits are another weak danger, which helps a spyware to enter the application programming interface (API) and extract essential data, including confidential PII (Barrett 2018). The usage of Vulnerability Management software will minimize this, which increases the network security, and threats and risks from third parties.
How the Organization Incorporates Privacy Principles in Relation to Data Collection,
Disclosure, and Retention
The organization maintains that its data controllers and managers are responsible for privacy while displaying the legal requirements of the company (Barrett 2018). The company also combines privacy standards to ensure that data security is protected and up to date with outdated and unauthenticated data for removal or clarification. Finally, the organization carries out a routine security review of data privacy.
References
Almuhammadi, S., & Alsaleh, M. (2017). Information security maturity model for NIST cyber security framework. Computer Science & Information Technology (CS & IT), 7(3), 51-62.
Barrett, M. P. (2018). Framework for improving critical infrastructure cybersecurity. National Institute of Standards and Technology, Gaithersburg, MD, USA, Tech. Rep.
B., A. (2019, November 20). TrueCoach reviews. Capterra. https://www.capterra.ie/reviews/155784/fitbot
Mylrea, M., Gourisetti, S. N. G., & Nicholls, A. (2017). An introduction to buildings cybersecurity framework. In 2017 IEEE symposium series on computational intelligence (SSCI) (pp. 1-7). IEEE.
