OPM question

opm.docx

Home >Computer Science homework help >OPM question

OPM data breach affected an estimated four million government employees with hackers gaining access to OPM personal information from employees such as social security numbers and addresses (Gootman, S. (2016). Since OPM was exposed to hackers they elected to use security awareness training for government workers. OPM told their employees that it was important that they check the email domain name by using their mouse to hovering over the sender’s name in their inbox before opening and responding to any message (Gootman, S. (2016). This was used to help prevent some phishing attacks. With reviewing the OPM security breach I notice that they lacked the proper security awareness training program and because of the lack of training they became a victim of social engineering. They didn’t properly oversee the security controls in place for the back-ground investigating companies.

Research questions: How long did it take OPM to notify government employees in regards to the security breach? Did OPM use the correct security protocols in regards to the use of contractors conducting background investigations? What type of training programs did OPM utilize to educating their user population on social engineering?