How to implement the protection of a corporate portal for a thesis?

Question

IT education

I am a student of the specialty "information security" and now I am writing a thesis on the topic "ensuring information security of web resources of commercial organizations". In the practical part, I need to implement protection functions on a specific corporate website of a fictitious organization. There are several questions.
I think that it is most correct to consider security on the example of corporate portals, since they, unlike simple sites (such as a business card site of a company), have something to protect. But the portal should not be tied to databases, workflow, etc., since this is a slightly different topic and is more difficult to implement. And the internal portal in this case is a regular site, only stored on the organization's web server (the company's internal site), to which there is no access from the outside, do I understand correctly?
Accordingly, for practice, you need a website that includes the possibility of registration, a forum, a personal page of an employee, and so on. Where to get it? Writing from scratch is not an option. I looked through ready-made solutions for corporate portals, like JomPortal , wrote to them about 2 weeks ago, but still have not responded. But in ready-made solutions, at least some protection functions are most likely already implemented, and I need to install them myself in my work. The same goes for website builders like wix.
The theory is almost ready, the practice is completely at zero, the diploma supervisor does not respond to messages, all hope is for the collective mind. Can you please tell me on what exactly you can practice the protection of web resources?

Answer 1

Theory is almost ready, the practice is completely at zero

you need to get away from it. Show what you have in theory?