Similarities/Differences

• Similarities

  • Both are about protecting information stored in any form from a breach

• Differences

  • Information Security:

    • Protection of integrity, confidentiality, and availability of information

    • Protects ALL information

  • Cyber Security:

    • Protecting electronic and mobile devices from attacks in the cyberspace

Emerging Threats and Trends

• Remote working with cybersecurity threats: if people work from home without a VPN, it is really easy for hackers to get confidential information

• Increasing cloud networks present information security threats: using poor cloud infrastructure makes your information subject to hacking

• AI trend: making fraudulent hacking a lot easier through voice, face, and password identification.

Balance of Productivity and Security:

• Regularly communicate the importance of cybersecurity and information security and hold trainings for employees.

sources:

Information vs Cyber Security Video  

Mandela Metropolitan University

Trends Link

How to Balance Security and Productivity for Business Growth

• Phishing: receiving an email from what looks like a real company that includes a malicious link that can give the hacker personal information

• Physical Breech: when people impersonate someone to gain their information

• Pretext Calling

  • Companies can protect employees against social engineering tactics by installing software that notifies people when they are receiving a phishing email and educating employees with security training.

Emerging Trends and Threats in Social Engineering

• Deepfakes through AI: manipulating images, voices, etc to appear like they are coming from a specific person, but are actually coming from a hacker.

  • Companies can prevent this by using caution, but this is really new so there isn't much protection from it.

• False Assumptions: people assume that Google and Microsoft are ALWAYS safe, that criminals will not have a conversation with you, and that replying to existing emails is safe.

  • To debunk these assumptions, corporations should educate employees about security threats.

Sources:

• Video: What is Social Engineering?

• Threats and Trends of Social Engineering

• Since the pandemic, it has become increasingly popular to work remotely on devices that have not yet been secured with the company.

• A lot of businesses have been made aware of these risks and have started to provide company computers for remote workers to ensure that everything is up to the companies cybersecurity standards.

• Companies have also encouraged workers to use a VPN and have educated employees about the importance of cybersecurity and warning signs to look out for.

Emerging Trends and Threats:

• Data Leakage: it is a huge threat to companies if employees have sensitive data outside of the workplace. It is hard to maintain the security of information when a company does not have full control of their data.

• Mixing personal and business use: people will use work software for personal matters, personal emails and software are more subject to hacking

Sources:

How to Secure Remote Workers and Cloud Security 
Trends in BYOD Security