This project is an opportunity for students to apply their classroom learning to a real world organization through a structured Information Security Audit. The Federation of Canadian Secondary Students (FCSS-FESC) seeks to strengthen its internal security practices, governance issues, and digital presence. 

Over the course of four weeks, students will assess the organization’s digital infrastructure and information systems. They will look for potential security threats, test general IT Controls (ITGCs), and review the alignment of current security protocols with standard governance frameworks. This initiative supports the organization’s long term goal of improving its digital safety, data integrity, and compliance with evolving privacy and security.

Students will also engage in analysis, documentation, and solution design, contributing to a more secure and accountable operating environment for a national non profit organization.

• Conduct an internal security audit to evaluate FCSS-FESC’s current IT environment, including systems for file storage, user access, and internal communications
• Identify and document potential risks and vulnerabilities in current security and privacy practices.
• Perform IT General Controls (ITGC) testing on systems such as Google Workspace, Slack, and Internal Servers
• Review relevant governance and compliance frameworks and assess how FCSS-FESC aligns with these standards
• Propose actionable security improvements, including updates to internal policies, improved data protection methods, or new access controls.
• Draft a comprehensive report outlining audit methodology, findings, risk ratings, and recommendations.
• Present findings and recommendations to FCSS-FESC’s senior leadership team with a focus on cost effective, realistic security upgrades for a non profit organization.
• Optional: Develop a training resource or quick reference guide to help staff and volunteers understand key data protection practices