Trisha Nguyen
My Cybersecurity Training
Sustainably
Quick Facts
Sustainably is an environmental technology company focused on eliminating plastic film waste from commercial supply chains.
The organization provides businesses with recycling equipment, logistics, and real-time reporting to simplify plastic film recycling.
Its mission is to build zero-waste logistics by making recycling convenient, affordable, and scalable for warehouses, manufacturers, retailers, and distribution centers.
By combining technology, operational expertise, and sustainability solutions, Sustainably helps organizations reduce waste, lower costs, and improve environmental performance.
Sustainably
About the Organization
Sustainably is dedicated to helping businesses create more sustainable operations by providing efficient plastic film recycling solutions.
Through customized recycling programs, equipment installation, automated pickup services, and sustainability reporting, the organization enables companies to reduce landfill waste while improving operational efficiency. Sustainably also uses technology to optimize recycling logistics, lower waste management costs, and provide transparent environmental data.
By making recycling simple and cost-effective, the organization supports businesses in achieving long-term sustainability goals while contributing to a cleaner and more circular economy.
Sustainably
Community Involvement
Sustainably works closely with warehouses, manufacturers, retailers, airports, cargo operators, and distribution centers to integrate recycling into daily operations. The organization trains employees, installs equipment, and collaborates with operational teams to maximize recycling participation.
The company partners with equipment manufacturers, logistics providers, and commercial facilities to expand plastic film recycling throughout supply chains. These collaborations improve operational efficiency while reducing environmental impact.
Through ongoing customer support, automated reporting, and continuous process improvements, Sustainably helps organizations build long-term recycling programs that strengthen sustainability across their operations.
Sustainably
Sources of Funding
Sustainably generates revenue by providing commercial recycling services, equipment rentals, logistics support, and waste management solutions for businesses seeking to improve sustainability.
The organization works with commercial clients across multiple industries that invest in recycling equipment, pickup services, and technology-driven sustainability reporting to improve environmental performance.
Revenue supports continued investment in recycling infrastructure, logistics technology, equipment maintenance, customer support, and the expansion of zero waste recycling programs throughout commercial supply chains.
My Security Presentation
During the Cybersecurity & Defense Internship, I worked with Beth Cerrone and Jamie Kreider to learn the basics of cybersecurity and explore its practical applications.
Throughout the week, I worked with a nonprofit to develop cybersecurity solutions to protect against various cyber threats. I worked with my team to analyze the threats to the organization and then developed a comprehensive solution.
At the conclusion of this internship, our team pitched the final proposal to the Leadership Initiatives Grant Committee, earning a microgrant to support the implementation of our proposal.
My Security Proposal Presentation
Throughout the program, we worked closely with Sustainably to gain a clear understanding of its operational goals and the internal systems supporting its business. These meetings provided valuable insight into how the company stores customer information, manages business accounts, and secures its website infrastructure. Because Sustainably continues to expand its customer base and digital services, protecting internal systems and sensitive business information is essential to supporting future growth and maintaining customer confidence.
The most pressing internal issue is the company's vulnerable backend infrastructure. Weak email authentication, outdated credentials, fragmented customer data, and insufficient protection against common web attacks increase the risk of phishing, unauthorized account access, client data exposure, and website compromise. These vulnerabilities could significantly impact both daily operations and customer trust if left unaddressed.
To address these issues, we proposed implementing a layered cybersecurity strategy centered around secure email authentication, hardware based multi factor authentication, and migration to a consolidated Supabase backend with row level security. Additional recommendations include strengthening domain security through DNS protections and hardening the website against common attacks such as SQL injection and cross site scripting. Together, these improvements provide stronger protection for customer information, reduce the likelihood of successful cyber attacks, and establish a more resilient security foundation for the company's continued growth.
Internship Highlights
I was given the unique opportunity to take exclusive tours of multiple government and security sites to speak directly with security professionals. During these tours, I was able to witness firsthand how cybersecurity operates at the national and international level.
I was able to visit the United States’ Security Innovation Lab. Throughout this visit, I was able to learn firsthand from government officials regarding how the government funds and establishes cyber-intelligence and cyber-counterintelligence technology.
We also toured the Homeland Security Investigations' (HSI) Technical Operations Center. During this visit, we learned how the government uses technology to track major crimes including wire-fraud, human trafficking, child exploitation, and more.
In order to apply the skills I learned throughout the internship, I worked directly with an organization based in the Washington, D.C. area, Sustainably, to discuss their company's cybersecurity needs.
After three meetings where I walked through the organization model, protected information, and staff training of the nonprofit, I worked with my team to create a staff training protocol and threat analysis for my partner.
At the end of the internship, I advocated on behalf of, and received funding for, my organization partner to implement the cybersecurity training protocols so they can best protect their client information and continue to develop with a reduced fear of cyberattacks and cybersecurity threats.
To learn more about the world of cybersecurity, I was given the unique opportunity to speak directly with cybersecurity experts from multiple organizations and backgrounds.
I worked directly with one of the leading consultants in Cyber Threat Management, and a lead Cyber Consultant from Ernst & Young, Phuong Nguyen, to learn about common threat assessment and cybersecurity counterintelligence. I also heard from the Director of Government Compliance for KPMG, Lisa Mathews, and a former Department of Justice Prosecutor, Brian Levine.
Throughout the internship, I also heard presentations from and spoke with representatives from the Department of Defense, Department of Homeland Security, and the National Security Agency. To learn the physical side of cybersecurity, we also had the unique opportunity to meet with globally recognized penetration testers and network threat assessors.
In order to put the skills we learned to the test, I had the unique opportunity to work with cybersecurity software typically used in graduate-level instructional courses. This provided me with a hands-on environment to develop and apply a wide range of cybersecurity skills.
I began with network cybersecurity, completing labs focused on network security and Linux to gain a deeper understanding of how networks communicate and where vulnerabilities may arise. This experience highlighted the ways in which cybersecurity threats can disrupt or compromise these communications, reinforcing the importance of proactive defense measures.
Building on these Linux skills, I participated in capture-the-flag coding competitions and explored virtual rooms designed to simulate real-world cybersecurity challenges. These activities tested both my technical abilities and problem-solving skills, allowing me to apply classroom concepts in practical, scenario-based settings.