What is the difference between Information Security and Cyber Security? How are they the same?

Infosec is a broad topic relating to the security of Data whilst Cybersec is the virtual aspect of data and security in the cyber world. The biggest similarity between both is that they are aimed at securing data from unwanted access.

What are the emerging trends and threats in the field of information security, and how can organizations prepare for them?

Based on our previous classes I would say the biggest emerging trend is how AI is being used for threat detection and response to those threats. Investing into this technology early and making it part of your day-to-day business is a way of preventing other AI threats and growing into the effective use of AI.

How can organizations balance the need for information security with the need for employee access and productivity?

There are two big methods I found, the first one being Multi-Factor authentication, requiring more than one piece of evidence to prove someone's access rights. The second method is Continuous monitoring, where you implement a Continuous Monitoring system that is able to identify and respond to threats as they appear.

What are the potential consequences and implications of cyber-attacks on organizations, and how can organizations prioritize cybersecurity efforts to protect  data?

• Data and information can be leaked which can lead to financial losses, operational disruption, and most importantly loss of customer trust and a good reputation.

• In order to prioritize cybersecurity it is important to look at the risk assesment and implement security controls. You can also implement employee training and awarness to prevent the issue before it happens.

How can organizations effectively respond to ransomware and cyber  attacks, and what are the key factors to consider in developing an incident response plan?

• When planning and preparing for a ransomware attack it is important to establish a incident and response team with a direct plan to ensure a coordinated response.

• A key factor to consider is definng a object and scope of individually focus on data that may be impacted and what to do if that data is impacted. From there it is easier to design a response plan.