Cyber Security Discussion 1

It is clear from the scenario, that an outsider is trying to gather sensitive information from the organization in multiple ways.

 

The intruder conducts an identity theft, claiming to be a seller of hardware. He might be using phishing method to collect personal information of the employees. Employees are receiving emails to send personal data. He might be doing identity theft misuse company data. Organization should follow the basic security norms to avoid these kinds of security threats. (National Academy of Engineering, 2019)

 

Firstly, All the servers related to the organization and the network needs to be secured to prevent intrusion on outsiders using firewall settings. The organization should have a strong firewall to avoid any security threats via emails and should delete any suspicious emails from the unknown senders and/or categorize them as spam. The network team should have scheduled network scans to detect threats more often

Employees need to be provided basic awareness training about the various possible security threats. Any such mails should be sent to spam and be analyzed by security team.  Confidential or sensitive data must be secured. Care should be taking while disposing such documents. They need to be shred. Sending of data to external network should be flagged. (National Academies of Sciences, Engineering, and Medicine, 2019)

Incoming and outgoing mails need to be scanned for malware or virus

Finally, no matter how complex and secure the company maintains infrastructure,

the threats to security are inevitable, in one way or the other.

So, its organization's responsibility to keep its infrastructure and its employees and customer's data secure.

 

 

References

National Academies of Sciences, Engineering, and Medicine. (2019). Security 101: A Physical and Cybersecurity Primer for Transportation Agencies. Washington, DC: The National Academies Press. Retrieved from https://doi.org/10.17226/25554

National Academy of Engineering. (2019). Privacy and Security in the 21st Century: Who Knows and Who Controls? Washington, DC: The National Academies Press.