William_Zahradnik
William Zahradnik
My Cybersecurity Internship
Freshfarm Markets
Quick Facts
FreshFarm works to build lasting community change by improving access to fresh, healthy, local foods and supporting environmental sustainability.
Their mission also includes strengthening the local economy and educating people about food origins and sustainable practices.
Through vibrant farmers markets, they create inclusive spaces that foster community connections.
They also help ensure farming remains a viable, rewarding occupation for future generations in the region.
Freshfarm Markets
About the Nonprofit
FreshFarm Markets believes the current food system prioritizes profit at the expense of health, sustainability, and equity. This imbalance negatively affects farmers, children’s nutrition, and community well-being.
To counter these challenges, FreshFarm implements transformative programs that work across the entire food system. Whether in school classrooms, community kitchens, or regional farmers markets, their initiatives support systemic change.
By fostering healthier communities and more sustainable food practices, FreshFarm strengthens local agriculture and empowers individuals. Their commitment to nourishing the food future ensures a more just, resilient, and inclusive system that benefits everyone from growers to consumers.
Freshfarm Markets
Community Involvement
FreshFarm Markets creates meaningful community impact by supporting farmers, food producers, and the broader local food network. Their dedicated team includes market managers, outreach experts, event coordinators, and sustainability advocates who work directly with vendors, customers, and local organizations to build a more resilient food system.
FreshFarm collaborates with nonprofits, government agencies, and businesses such as sweetgreen, Open Book Foundation, and Mid-Atlantic Farmers to improve food access, promote sustainable practices, and strengthen local economies.
These partnerships help deliver fresh products, education, and vital resources that empower communities and support regional agriculture.
Freshfarm Markets
Current Vulnerabilities
As FreshFarm Markets expands its digital footprint through online purchasing, vendor communication, and customer engagement, cybersecurity has become a critical focus. Protecting customer data, including payment details and personal information, is essential in light of privacy regulations like GDPR and CCPA.
Ensuring secure transactions through encrypted payment systems helps reduce the risk of fraud. Vendor information must also be safeguarded, as many rely on FreshFarm’s platforms for business operations.
Website and communication security are equally important to prevent phishing, hacking, or malware. Strengthening these areas ensures continued trust and protects both the organization and its broader community.
My Security Presentation
During the Cybersecurity & Defense Internship, I worked with Beth Cerrone and Jamie Kreider to learn the basics of cybersecurity and explore its practical applications.
Throughout the week, I worked with a nonprofit to develop cybersecurity solutions to protect against various cyber threats. I worked with my team to analyze the threats to the organization and then developed a comprehensive solution.
At the conclusion of this internship, our team pitched the final proposal to the Leadership Initiatives Grant Committee, earning a microgrant to support the implementation of our proposal.
My Security Proposal
Throughout the program, we worked closely with Freshfarm Markets to gain a clear understanding of their goals. These meetings provided valuable insights into critical gaps within their cybersecurity system and the potential risk they pose to the operation of their business.
The most pressing issue facing Freshfarm Markets is the lack of advanced cybersecurity knowledge among employees, combined with the use of personal devices that limit monitoring and control, which significantly undermines its ability to detect, respond to, and recover from cyber threats while exposing critical data to potential breaches.
To address this issue, we developed a comprehensive security proposal that included a SWOT analysis of Freshfarm Markets’ current situation. Drawing on international cybersecurity standards, I proposed adding a “Report Phishing” button to all staff Gmail accounts, enabling employees to easily flag suspicious emails for IT review and rapid incident response. This supports compliance with GDPR and strengthens the organization’s ability to respond to phishing threats promptly. We also recommend implementing monthly micro-training sessions—short, focused videos on topics such as phishing, secure data sharing, and encryption practices—to build cybersecurity awareness and ensure accountability through completion tracking. To reduce risks from unmonitored communications, all official interactions must be conducted within the organization’s domain, with email logs monitored weekly to detect unauthorized external usage. Finally, we propose encrypting all databases and communications using static and dynamic encryption methods, including SSL/TLS for data in transit, to protect sensitive information from interception and unauthorized access. These combined measures will significantly enhance the organization’s defense against malware, phishing, and third-party vulnerabilities.
Internship Highlights
I was given the unique opportunity to take exclusive tours of multiple government and security sites to speak directly with security professionals. During these tours, I was able to witness firsthand how cybersecurity operates at the national and international level.
I was able to visit the United States’ Security Innovation Lab. Throughout this visit, I was able to learn firsthand from government officials regarding how the government funds and establishes cyber-intelligence and cyber-counterintelligence technology.
We also toured the Homeland Security Investigations' (HSI) Technical Operations Center. During this visit, we learned how the government uses technology to track major crimes including wire-fraud, human trafficking, child exploitation, and more.
In order to apply the skills I learned throughout the internship, I worked directly with a nonprofit based in the Washington D.C. area to discuss their company's cybersecurity needs.
After three meetings where I walked through the organization model, protected information, and staff training of the nonprofit, I worked with my team to create a staff training protocol and threat analysis for my partner.
At the end of the internship, I advocated for, and received funding for, my nonprofit partner to implement the cybersecurity training protocols so they can best protect their client information and continue to develop with a reduced fear of cyber attacks and cybersecurity threats.
To learn more about the world of cybersecurity, I was given the unique opportunity to speak directly with cybersecurity experts from multiple organizations and backgrounds.
I worked directly with one of the leading consultants in Cyber Threat Management, and a lead Cyber Consultant from Ernst & Young, Phuong Nguyen, to learn about common threat assessment and cybersecurity counterintelligence. I also heard from the Director of Government Compliance for KPMG, Lisa Mathews, and the lead SME for the FutureG Initiative for the Department of Defense, Dr. Dan Massey.
Throughout the internship, I also heard presentations from and spoke with representatives from the Department of Defense, Department of Homeland Security, and the National Security Agency. To learn the physical side of cybersecurity, we also had the unique opportunity to meet with globally recognized penetration testers and network threat assessors.
In order to put the skills we learned to the test, I had the unique opportunity to work with cybersecurity software typically used in graduate-level instructional courses. This provided me with a hands-on environment to develop and apply a wide range of cybersecurity skills.
I began with network cybersecurity, completing labs focused on network security and Linux to gain a deeper understanding of how networks communicate and where vulnerabilities may arise. This experience highlighted the ways in which cybersecurity threats can disrupt or compromise these communications, reinforcing the importance of proactive defense measures.
Building on these Linux skills, I participated in capture-the-flag coding competitions and explored virtual rooms designed to simulate real-world cybersecurity challenges. These activities tested both my technical abilities and problem-solving skills, allowing me to apply classroom concepts in practical, scenario-based settings.