Week 8 - Mitigating Human Factor Risks

Question 1

How can you use senior leadership?

Answer 1

Ensure senior leaders set the tone for cyber security.

ensure they don’t ignore security policies and processes

Question 2

How can you use Staff?

Answer 2

• ensure staff know their daily tasks and pressures
• ensure they are in including in security policy making
• ensure they are encouraged to report issues
• dont penalise mistakes, see them as a chance for improvement

Question 3

How should cyber security training be addressed?

Answer 3

• Understand and prioritise the cyber security knowledge and behaviours that individuals in your organisation need
• Highlight the benefits of training to your staff
• Deliver training in small, frequent chunks.
• Avoid using, the same training video used year after year

Question 4

What is an insider Threat?

Answer 4

individuals who are/were employed by the company but carry out malicious activities harming the company

Question 5

How to Mitigate Insider Threat?

Answer 5

• Train Employees to recognize risky behavior in their peers and report it to IT or HR.
• coordination between IT and HR, they can ensure access is revoked for terminated employees
• Technical controls analyze user activity, comparing it to past behavior to identify abnormalities.