Cyber security risks

Question 1

Human threats

Answer 1

Hackers being able to get into an organisations internal network, to steal data or damage

Question 2

Fraud

Answer 2

Theft of funds by dishonest use of computer system

Question 3

Deliberate sabotage

Answer 3

Could be anything e.g malicious damage

Question 4

Viruses

Answer 4

Can spread through network to all organisations computers

Question 5

Malware

Answer 5

Often spread by clicking on a email

Term is used for intrusive software

Question 6

Denial of service

Answer 6

Characterised by attackers attempting to prevent legitimate users of a service from using it

Question 7

Checklist steps to protect an organisation from cyber risks

Answer 7

Allocate responsibility

Protect computers and your network

control employee access to computers and documents

Protect against viruses

Extend security beyond the office

Secure files stored on the cloud or other devices

Plan for the worst

Educate your team

Keep records and test your security

APC- PESPEK

Question 8

Allocate responsibility

Answer 8

Decide who is responsible for maintaining security functions

Question 9

Protect network and computers

Answer 9

Implement back up procedures

Implement a firewall (barrier between trusted network and untrusted, so blocks some sites)

Question 10

Control employee access to computers and documents

Answer 10

Keep those with administrators ( complete access) to a minimum.

Use login ID and remove inactive ones.

Question 11

Protect against viruses

Answer 11

Ensure staff are updated on spotting modern malware

Access anti virus software and update it

Question 12

Extend security beyond the office

Answer 12

Check all business devices used remotely are protected.

Additionally, ensure staff are aware of dangers when connecting to public WIFI

Question 13

secure files on the cloud or external devices

Answer 13

Restrict read- write capabilities

Establish approved lists of sharing mechanisms and online platforms. Block those not approved

Ensure sensitive information that is transferred outside of an organisation is encrypted.

Question 14

Plan for the worst

Answer 14

Create a full disaster recovery plan in event of cyber attack

Question 15

educate employees

Answer 15

Plan business training around security

Question 16

Track files and test security

Answer 16

Regularly test procedures

Implement a system of keeping records to maintain security.