Cybersecurity Group Project by Ralisha Anderson

General Questions

raan6262 — 2024-04-04 23:25:40 UTC

1. Information Security is in place protecting all information forms from unauthorized access, covering both digital and non-digital data. On the other hand, Cyber Security is about protecting electronic information from online threats. Despite their differences, both fields overlap in their core objective to maintain safety, integrity, and availability of data, leveraging risk. These are all strategies to combat internal and external threats effectively. It’s clear that in our digital age, the principles of both Information and Cyber Security are essential for data protection.

2. Ransomware data breaches are becoming an issue, especially as more data moves to the cloud. To prevent this, organizations are being more proactive then ever: employing advanced technologies to preempt attacks, emphasizing ongoing staff training to avoid breaches from human error, and staying adaptable to the ever-changing threat.

3. This will ensure employees only have access to the information and resources for their catered position roles. Create practices that both secure sensitive information and are simple to use. Tech and educate the employees about security implemented and the importance of security measures within the business.

Video source: https://youtu.be/eizn9TC68E8?si=KnXzAHVNjT4uZJKO

Text source: https://www.pwc.com/us/en/technology/alliances/microsoft/cybersecurity.html?WT.mc_id=CT3-PL300-DM1-TR1-LS2-SC_XS-BM-CN_OTHER-AlliancesSearch&gclid=Cj0KCQjwn7mwBhCiARIsAGoxjaI5Zo8cUiqqkfhPNHDxceY2ZxsSgepOuGmTW1TPlrI-XcETr3L6tJoaAszTEALw_wcB&gclsrc=aw.ds

Social Engineering

raan6262 — 2024-04-04 23:26:09 UTC

What are the most common social engineering attacks, and how can organizations protect themselves from them?
The some of common types of social engineering attacks is phishing, pretexting, honeytrap, and tailgating.
Companies can prevent physical access to company devices and dispose of them properly. prevent access to unauthorized persons. Best thing to do is just keep your networks and database secure.
What are emerging trends in social engineering techniques, and how can organizations stay ahead of these evolving threats through continuous employee education and awareness campaigns?
one of the most common trends for social engineering attacks is through AI. Phishes can make personalized emails when they are targeting a victim. Criminals can also use AI to make personalized audio recordings to manipulate their victim. Companies can protect themselves by being aware of the policies and knowing their data. If you are concerned check in with who ever the message is coming from.

Video source: https://youtu.be/wLgtRQHcUqQ?si=28edz62Vb90mBXGL

General Questions Summary

raan6262 — 2024-04-04 23:58:39 UTC

Social Engineering Attacks

meha4320 — 2024-04-05 00:04:55 UTC

Government Agencies and Policy for Cyber Security

jefo8882 — 2024-04-05 00:07:49 UTC

What are the roles and responsibilities of CISA (Cybersecurity and Infrastructure Security Agency) in protecting critical infrastructure from cyber threats, and how does it collaborate with other stakeholders?

The responsibilities of the Cybersecurity and Infrastructure Security Agency (CISA), include: protecting the nation’s, “critical infrastructure,” from physical threats, cyber threats, and hazards; Comprehensive Cyber Protection - 24/7 cyber monitoring including cyber situational awareness, incident response, and cyber defense to reduce risk to critical infrastructure; Infrastructure Resilience- security and surveillance training and technical assistance as well as providing stakeholders with assessment and infrastructure to owners; Emergency Communications - enhances public safety; National Risk Management Center - manages and mitigates risk. The CISA collaborates with other stakeholders by sharing information across both public and private sectors.

(Bullet point #2) How does the National Cyber Incident Response Plan (NCIRP) facilitate collaboration and information sharing among critical infrastructure stakeholders, and what lessons can other sectors learn from its approach?

The NCIRP provides a level of transparency among stakeholders that help them understand agencies, (the federal government,) and other partners. The NCIRP also helps provide guidelines for a proper coordinated response to a cyber threat/attack. Other sectors can learn how to properly respond to cyber threats/attack, as well as the importance of collaboration between other sectors and or companies to protect information.

Government Agencies and Policy for Cyber Security

jefo8882 — 2024-04-05 00:08:31 UTC

Link #2 (Business Driven Information Systems McGraw Hill Page 155)

Government Agencies and Policy for Cyber Security Summary

jefo8882 — 2024-04-05 00:15:10 UTC