ipl-logo

Nt1330 Unit 7

664 Words3 Pages

1. Viruses Can destroy all of the data and erase all of the file or misused by the attacker. Have the anti-virus downloaded in your computer and make sure your computer is completely updated. 2. Phishing Attacker will be able to get the private information of the person and will gain access on computer Be able to recognize the fake emails from the attacker and avoid opening them up. 3. Dumpster divers Dumpster diver will dig for the information that has all of the information about payroll, position and title that puts business at risk Destroy or shred all of the information that is not needed to avoid the information to be misused by the attacker. Application and Network Attacks 4. Letting the Ex-employee log in to the system even after he leaves the company It will destroy and …show more content…

All of the patches in the system that are have not been re-patched which leaves the system with vulnerabilities. This risk leaves the business system open for hackers to break in and access all of the companies’ personal information The businesses should make sure that all of the patches are re-patched to reduce risk of business Physical Security 7. Most of the companies and schools use cipher lock to restrict the access to the certain area of companies or school. The individuals who are not authorized can do shoulder surfing to gain access to the restricted areas. To reduce the risk, companies or schools should use multi authentication. 8. Natural disaster Can result in loss of important and confidential information of businesses Back-up the systems on regular basis to avoid losing all of the data. 9. Unauthorized user gain the access to your workstation This risk could be loss of your personal information and data on your computer Should monitor the access to your workplace. Wireless Vulnerabilities 10. Wi-Fi protected access (WPA) Sharing the key can be dangerous for the networks We should change the keys every single day and must be disclosed to guest

Show More
Related
1522 Words | 7 Pages

In addition, the business data will be stored on these devices, being or not protected only by the individual security awareness of each employee. Therefore, it is likely that the confidentiality of corporate data will be compromised if an employee’s device is lost or stolen. Take Godiva, a chocolate manufacturer, as an example. On November 25, 2014, they notified employees of the company of a data breach when a Human Resources employee, who was traveling to retail sites, had a briefcase stolen from a car. The briefcase contained a laptop that had employee information on it.

Read More
370 Words | 2 Pages

Search the Internet to find a recent case of a database breach and post the link, summarize the incident, and express your legal and ethical concerns. I chose Home Depot because I am an account and stockholder for this company. Hackers breached Home Depot’s network by installing a malware that stole account holder’s log on credentials, payment data, and email address information. The success of Home Depot had grown significantly since the recession and was the most successful of all stores in the home improvement industry. Somewhere along line of great success, their database was compromised due to insufficient security, which alarmed some 56 million-account holders.

Read More
728 Words | 3 Pages

This also incorporates rules to protect the employee and the company. This also protects the computer systems and the networks from virus attacks, compromise of network. In order to better protect the PHI, we should also have an ‘email policy’. This policy makes sure the email system is used properly and users are alerted of what

Read More
472 Words | 2 Pages

Outcome 2 Understand how to maintain security and confidentiality at work and deal with concerns 2.1 Outline the purpose and benefits of maintaining security and confidentiality at work In dealing with confidential information, such as names, addresses, national insurance numbers and bank details, the organisation is being trusted with that information. If any of that information got out or wasn’t correctly disposed of, i.e. shredded, then the organisation would come under a serious investigation and would probably see some kind of court action against them. If anyone gets hold of a person’s bank details, dependant on their intentions, they could easily get access to the person’s money and basically go on a spending spree; identity theft

Read More
913 Words | 4 Pages

For operational purposes, the company collects and stores confidential information about their customers, employees, suppliers, and vendors. For purposes of their rewards program, the company collects sensitive and confidential consumer information. Although security measures and information technology systems have been put in place to ensure secure transmission and storage of confidential information, security breaches, computer viruses, or even human error can occur. Any of these events could cause data to be lost or stolen, as well as disclosed and used with malicious intent. Such occurrence could lead to litigation, fines, increased security costs, and damage to

Read More
701 Words | 3 Pages

Employees are the greatest threat when it comes to information security due to the fact they are the first line of defense against threats. Mistakes are bound to happen. If an employee fails to follow rules and policies in place, the company's information security is exposed. Human error is the main cause for breaches and security compromise, not lack of Technology. Human error are as follows: inexperience users, improper training, and incorrect assumption are the company's greatest threat regarding information

Read More
1134 Words | 5 Pages

These risks should be examined within the confines of the business needs, mission statement, and legal obligations. Classification of potential risks allows the organization to prioritize efforts in a granular manner to close security gaps based on cost, effectiveness, and potential loss of business as well as the sensitive information they manage. This should also include security efforts that conform to business requirements, laws, regulations, and follow the organization’s mission statement. It should identify the policy scope, definitions, roles, procedures, team members, points of external contact, organizational groups, services offered, contact lists, tools, applications, system diagrams, custody chains, organizational dependencies, and performance metrics as well as reporting, contact, and evidence documentation

Read More
629 Words | 3 Pages

I think that it is important for the network of my employer to be secure and

Read More
1537 Words | 7 Pages

This is especially risky for an industry leader such as Samacme since they have a bigger duty to protect their customers’ data than other small companies. This would also affect directly the shareholders that have invested in the company’s

Read More
839 Words | 4 Pages

Nature of the Study The qualitative method will be appropriate for this study because it involves an understanding the motivation, reasons, and opinions of real-life situations. The qualitative method also provides insights into the problem from the perspective of the participant to develop ideas from significant events to explore contemporary issues to find answers to questions (Park & Park, 2016). More specifically, I determined that the qualitative method would be most appropriate for this study because I intended to explore strategies owners of small businesses use to protect their business data from cyber-attacks. Other methods that were reviewed are quantitative and mixed methods.

Read More
1016 Words | 5 Pages

Companies with employees which have to work with personal information of customers, require their workers to also agree to certain terms and that it will have severe consequences if these rules aren’t followed. Also, as stated on the United States Department of Labor, companies should require their employees to request permission if they plan on taking information outside of the office. (Guidance on the Protection of Personal Identifiable Information, 2015) Furthermore, to prevent identity theft or compromising of PII, passwords are codes should never be written down, where they are used, and all electronic devices should be passcode secured, in case of theft of the devices and Papers or documents containing Personally Identifiable Information should always be shredded. And do not give out PII to anyone, whether it be friend or family.

Read More
1113 Words | 5 Pages

Individuals are targeted based on the information they have access to within an organization, some of the common targets include: Target Type of Information Approach 3.1 Receptionists They are exposed to so much information with the company and they interact with people entering and leaving the premises. Establish a rapport. 3.2 Help Desk Personnel Infrastructure information. Flinging a fake support request. 3.3 System Administrators Infrastructure and Application Information as well as future development plans information.

Read More
1410 Words | 6 Pages

Companies should securely safeguard personal information collected from the people using different techniques to protect the information from beaning loss, unauthorized access, use, modification, or disclosure.   Information that is located in the companies’ server or physical location should be protected by various security measures. Some of the security measures are locating files in a much secured location, by limiting the number of people who would work with this information, and using encryption software to protect information stored in servers or during transmission of personal information throughout the company’s website.   Also, companies should also have a schedule to destroy information that is outdated by using a retention schedule.

Read More
873 Words | 4 Pages

Well the answer is that security awareness is and always will be your first line of defense against the threats that our organizations face. For most businesses to operate, there will be a certain degree of trust that's required. In this case, you're trusting your users to make good decisions that protect your organization. Well this can be simple for certain situations where the action has been taught to the users back in high school or by their parents or in cases where it's just general knowledge. But once you add technology into the equation, you can no longer just make the assumption that your users will automatically know what to do.

Read More
721 Words | 3 Pages

From small to large companies data breach is reported. The methods are changed to keep the data of an organization safe but with this problem business becomes difficult. The ultimate challenge has to be faced by the organization because there are no any alternative to run away from this

Read More

More about Nt1330 Unit 7

Open Document