8.1.5 Potential threats and vulnerabilities to systems, data and information

Question 1

State:

4 human threats

Answer 1

• Human error
• Malicious employees
• Disguised criminals
• Targeted attack

Question 2

Fill The Blank:

Human threats may be caused by ………………… intent, …………………… or be accidental.

Answer 2

Malicious, Negligence

Question 3

Fill The Blank:

Human error can lead to an accidental loss of ……. - the ……. itself rather than a backup

Answer 3

Data, Data

Question 4

State:

2 examples of human error

Answer 4

2 of:
* Accidentally deleting a file containing the data, or shredding the final hard copy of a data file
* Saving files and folders to a different location
* Sending emails to the wrong recipients with attachments containing data
* Accidentally making changes in documents

Question 5

State:

2 ways that a company can attempt to minimise the chance of an employee making an error

Answer 5

2 of:
* Regular employee training
* High profile reminders to employees
* Ensuring all policies and procedures are read and understood by employees

Question 6

State:

Another name for malicious employees

Answer 6

Turncloaks

Question 6

Fill The Blank:

Malicious ……………. typically user their access details in a malicious and deliberate way to steal ……………………… and ………… for financial or ………………. reasons

Answer 6

Employees, Information, Data, Personal

Question 7

Fill The Blank:

An employee may become malicious due to a …………….. engineering attack

Answer 7

Social

Question 8

Fill The Blank:

A malicious employee who has exited the company and holds a grudge could be difficult to trace because they usually are familiar with ………………………….. and any ………………………

Answer 8

Procedures, Vulnerabilities