Peer review for draft
2
Improving Cyber Security
Tyler Siracky
NAIT
For
COMMUNICATION 1101
INSTRUCTOR: Kathy Cocchio
Note: for this section I have used the automatic Table of Contents generator in WORD.
Executive Summary 2
Overview 4
Major Point A 4
Major Point B 5
Major Point C 5
Conclusion 6
Recommendations 6
References 7
Executive Summary
Overview
Current Understanding of Best Practices
As of currently, the internet is always changing and improving, what is considered the best practice, is subject to change at any new discovery. “The history of cyber security began with a research project. A man named Bob Thomas realized that it was possible for a computer program to move across a network, leaving a small trail wherever it went. He named the program Creeper, and designed it to travel between Tenex terminals on the early ARPANET, printing the message “I’M THE CREEPER: CATCH ME IF YOU CAN.” (Sentinel One)The beginning of cybersecurity, in a sense began with hackers but less serious in comparison to the hackers today. Ray Tomlinson, the man who invented email, also created the first antivirus software, which would find the creeper and delete it. As technology advanced hackers found ways to create malware, a software designed specifically to damage other computers and the data they contain. After major data leaks and breaches, companies who were using online devices began to create more ways to keep their data private. Around this time in history viruses became more of a legitimate threat. Such as “In 1986, the German computer hacker Marcus Hess hacked an internet gateway in Berkeley, and used that connection to piggyback on the Arpanet. He hacked 400 military computers, including mainframes at the Pentagon, with the intent of selling their secrets to the KGB.” (Sentinel One) Attacks similar happen all the time and as employees, there are simple things we can practice to ensure the company's data stays protected. Some things you can do are-
· Avoid pop-ups, unknown emails, and links
· Use a strong password and authentication
· Connect to secure wifi
· Invest in security systems
· Install software updates and backup files
· Talk with IT when unsure
· Employ third party controls
Companies of all sizes should be aware of cybercriminals and employees should do what they can to protect their data. Throughout understanding the best practices of cybersecurity, it also touches on enhancing the corporate reputation by ensuring we care for our customers' data, in turn leaving them happy and satisfied.
two actionable recommendations for the company to take in the next six months
Previously listed were some simple things employees can do to help ensure cybersecurity. Expanding on those points, having computer systems in place to scan for viruses are crucial but individual actions help to guarantee our data’s security. I propose that the company sets up a day with IT to learn, or have a refresh, on proper cybersecurity practices. As mentioned in Allison Johanson’s article, even the simplest things such as clicking an unknown link or website could let in a hacker and kick off a cyber attack. Johanson also mentions “A little technical savvy helps, too. Learning the process for allowing IT to connect to your devices, along with basic computer hardware terms, is helpful. That knowledge can save time when you contact support and they need quick access and information to resolve an issue. (Johanson) Ensuring our employees feel comfortable.
The second recommendation would be determining if our company’s employees use their own devices, or if they are using all office technology. Although it may sound simple, having employees work from their own devices may not be as secure. During the Covid-19 pandemic, many employees who were able, were working from home and many will remain working from home. With using personal devices, it is critical that our employees are up to date on the best practices and checking with IT to confirm whether or not their individual Device is Compatible and Secure Enough to access Corporate Data. “Security is one example, for there are undeniable risks in permitting employees’ access to corporate resources from personal devices, and indeed the dangers posed by malicious applications and viruses disincentivizes many organizations from implementing BYOD [bring your own device].” (Lilach Bullock) Another complication from bringing one's own device is keeping track of it. “A lost device can also mean loss of information, whether in the form of notes and memos or presentations, worksheets and other valuable documents. This could be especially problematic if you work in a sensitive sector such as legal affairs, politics or the medical field.” (Lilach Bullock) However there are many benefits such as having employees respond quicker, it is more cost effective, and allows for flexible scheduling. Overall making sure devices are being monitored and employees are doing what they can to enhance security is ultimately the goal.
.
The Major Challenges of Cyber Security
As Cyber security grows and develops, Challenges and threats do as well. As the Post-industrial society is now in a state where everything is becoming digitized it creates a virtual paper trail that may contain important & confidential information. This makes all the information vulnerable as it is uploaded to a drive that anyone can access. The number of cyber-attacks constantly increases day by day. The programmers who are behind the cyber-attacks are creating their programs to be automatized and automated control systems as well as data infrastructure is dependent on certain amounts of data access and transfer, minor attacks to a network can deal major damage. The era we are in right now is characterized by total internetization which creates a risk for private information, thus making cybersecurity a requirement.
Conclusion
Recommendations
References
https://www.sentinelone.com/blog/history-of-cyber-security/
https://us.norton.com/internetsecurity-how-to-cyber-security-best-practices-for-employees.html
https://apps.dtic.mil/sti/pdfs/AD1027871.pdf
https://elib.bsu.by/bitstream/123456789/120038/1/v17no3p210.pdf
(Unfinsihed citations finish later)
Section 01/02
Tyler Siracky