# data[].attributes.body
Information Security and Cybersecurity

Information Security protects all forms of data from unauthorized access, use, and disruption. Cyber Security, a subset of Information Security, specifically focuses on safeguarding data within the digital realm. Both aim to protect information, differing mainly in their scope of protection.

Emerging Trends and Threats in Information Security

Emerging trends in Information Security include generative AI, cloud adoption, and enterprise decentralization. Organizations can prepare by adopting agile capabilities, harnessing GenAI, prioritizing security culture, and using outcome-driven metrics.

# data[].attributes.attachment_link.title
What is information security? A brief introduction

# data[].attributes.body
Social Engineering

The most common social engineering attacks include phishing, pretexting, baiting, quid pro quo, tailgating, and CEO fraud.

Emerging Trends in Social Engineering Techniques

Emerging social engineering trends include malicious QR codes, browser notification hijacks, collaboration scams, supply chain impersonation, deepfake recordings, text fraud, and typosquatting.

Source: Salahdine, F., & Kaabouch, N. (2019). Social engineering attacks: A survey. Future internet, 11(4), 89.

# data[].attributes.attachment_link.title
Social Engineering- The art of hacking humans | Prasad Sawant | TEDxElproIntlSchool

# data[].attributes.body
Balancing Information Security and Employee Activity

Organizations can balance information security and productivity by implementing flexible policy management, granular data access, and user education. They can enhance security by leveraging multi-factor identification (MFA).

Source: Antunes, M., Maximiano, M., Gomes, R., & Pinto, D. (2021). Information security and cybersecurity management: A case study with SMEs in Portugal. Journal of Cybersecurity and Privacy, 1(2), 219-238.

# data[].attributes.attachment_link.description
The protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide confidentiality, integrity, and availability. Sources: NIST SP 1800-10B under Information Security from FIPS 199, 44 U.S.C., Sec. 3542 NIST SP 1800-25B under Information Security from FIPS 199, 44 U.S.C., Sec. 3542 NIST SP 1800-26B under Information Security from FIPS 199, 44 U.S.C., Sec. 3542 NIST SP 1800-27B under Information Security from FIPS 200 NIST SP 1800-27C under Information Security from FIPS 200 NIST SP 800-12 Rev. 1 under Information Security from 44 U.S.C., Sec. 3542 NIST SP 800-128 under Information Security from 44 U.S.C., Sec. 3542 NIST SP 800-137 under Information Security from 44 U.S.C., Sec. 3542 NIST SP 800-18 Rev. 1 under Information Security from 44 U.S.C., Sec. 3542 NIST SP 800-30 Rev. 1 under Information Security from 44 U.S.C., Sec. 3542 NIST SP 800-39 under Information Security from 44 U.S.C., Sec. 3542 NIST SP 800-60 Vol. 1 Rev. 1 under Information Security from 44 U.S.C., Sec. 3542 NIST SP 800-60 Vol. 2 Rev. 1 under Information Security from 44 U.S.C., Sec. 3542 NISTIR 7621 Rev. 1 under Information Security from 44 U.S.C., Sec. 3542 NISTIR 8170 under Information Security from 44 U.S.C., Sec. 3541 The term ‘information security’ means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide integrity, confidentiality, and availability. Sources: NIST SP 800-59 under Information Security from 44 U.S.C., Sec. 3542 (b)(1) synonymous withIT Security. Sources: NIST SP 800-16 under Information Systems Security

# data[].attributes.body
Leveraging Multi-Factor Identification (MFA)

Multi-Factor Identification (MFA) is a powerful tool that organizations can utilize to enhance their authentication security. By implementing MFA solutions, organizations require users to provide at least two verification factors to access resources such as applications, online accounts, or VPNs. This multi-layered approach significantly reduces the risk of unauthorized access, thereby bolstering the organization’s overall security posture.

# data[].attributes.attachment_link.title
Authentication, Authorization, and Accounting - CompTIA Security+ SY0-701 - 1.2

# data[].attributes.body
Challenges and Ethical Implications of Using Biometrics for Authentication

Biometric authentication, while highly secure, presents several challenges including privacy concerns, identity theft risks, and the potential for false positives or negatives. To address these issues, organizations must implement robust data protection measures, obtain informed consent from users, and maintain transparency in how biometric data is used and stored. This approach helps balance the need for high-level security with the ethical obligation to respect user privacy.

Source: Ibrokhimov, S., Hui, K. L., Al-Absi, A. A., & Sain, M. (2019, February). Multi-factor authentication in cyber physical system: A state of art survey. In 2019 21st international conference on advanced communication technology (ICACT) (pp. 279-284). IEEE.