Continuation to previous assignment

Running head: SECURITY PROTOCOLS 1

SECURITY PROTOCOLS 3

Security Protocols

Student name

Course

Date

A security incident is an event that may indicate that an organization’s system or data have been compromised or that measures put in place to protect them have failed. Data breaches have increased in number year by year, with the reason being an internal or external source. Capital One, a bank holding company, experienced a data breach on its servers that exposed the personal information of nearly 106 million of the bank customers and applicants (Colby, 2019). This breach, according to the management, saw the hacker, a former employee of the Amazon Web services that hosted the Capital One Database that was leaked, gaining access to personal information related to credit card applications such as names, dates of birth, address and other related account numbers.

With the rise in security incidents, it essential to come up with protocols to reduce the risks involved. This includes; identifying the weakest areas of the organization-being aware of the issues or points prone to attack will enable the organization to make counter plans. Educating employees on the subject of network security to ensure they can identify threats and avoid them as well. Employing biometrics-use of electronics, for example, the biometric fingerprints will ensure that only the authorized person gets access to an organization or its data, unlike the pin codes or key cards. Enforcing security practices- to ensure the security of data, they are needed for security practices such as regular updating of passwords, which are different from previous ones, changing key cards regularly. Multiple verifications-having more than one step verification, such as biometric verification in conjunction with passwords and critical cards, enhances the security of an organization's data.

References

Colby, C. (2019). Capital One data breach: What you can do now following bank hack. Retrieved on January 20, 2020, from https://www.cnet.com/how-to/capital-one-data-breach-what-you-can-do-now-following-bank-hack/

Cremers, C. J. (2008, July). The Scyther Tool: Verification, falsification, and analysis of security protocols. In International conference on computer-aided verification (pp. 414-418). Springer, Berlin, Heidelberg.