Cyber Security, PwC & Ada

Cyber Security

why it matters to you (and PwC, and Ada).

“How does cyber-security affect me”
-> PwC's clients

Home

Open in new tab

Copy link

Poll

Have you ever been hacked? (For example your email, insta, snap, Tic Toc, PlayStation Network, Xbox Live, Minecraft etc)

• Yes

• No

trends.google.com

cybersecurity

Poll

Ever use the same password for multiple accounts/websites?

• Yes

• No

(For the next question, don't use any of your own passwords)

Open Ended

Write one example of what you think is a good password.

What makes a good password?

xkcd. 2011. Password Strength. [online] Available at: <https://xkcd.com/936/> [Accessed 26
September 2022].

​SSO (Single Sign On)

Cyber security breach affect on you

• Identity theft

• Financial loss

• Reputation harmed

• Gaming progress lost

• Time and effort needed to remedy

Multiple Choice

How many employees world wide does PwC have?

• 121,000

• 223,000

• 328,000

• 512,000

Cyber security attack on PwC

• Financial loss (regulator action & civil action - e.g lawsuits)

• Damages paid (legal action)

• Reputational damage

• Trust lost

• Customers lost

• Profits down

• Job losses / Hiring Freeze

Multiple Choice

How much money do you think companies worldwide spent on information security and risk management in 2023?

• £58 billion

• £112 billion

• £145 billion

• £185 billion

Worldwide spending on
information security risk
management will rise to

£287 billion by 2027

Source:

https://www.gartner.com/en/documents/4004647-forecast-analysis-information-security-and-risk-management-worldwide

Mcphee, E., 2022. Optus CEO issues emotional apology after millions of customers hacked. [online] Mail Online. Available at:
<https://www.dailymail.co.uk/news/article-11241489/Optus-CEO-Kelly-Bayer-Rosmarins-emotional-apology-millions-customers-details-hacked.html>
[Accessed 26 September 2022].

Multiple Choice

Human error is the cause of how many cyber-security incidents?

• 65%

• 75%

• 85%

• 95%

Open Ended

What things might you do using as you carry out your job that could mean a cyber security incident was your fault? (Whether you meant it or not!)

Match

Match the following:

• Phishing

• Vishing

• Smishing

• Spear Phishing

• Whaling

Sending emails with fraudulent links in

Pretending to be someone on the phone

Fraudulent messages via SMS

Targets specific individuals

Targets C-level high profile employees

• Sending emails with fraudulent links in

• Pretending to be someone on the phone

• Fraudulent messages via SMS

• Targets specific individuals

• Targets C-level high profile employees

Draw

With the pen, circle any potential issues with this email.

Match

Match the following

• Baiting

• Quid Pro Quo

• Pre-texting

• Shoulder surfing

• Watering Hole Attacks

Leaving something tempting

Offering something free in exchange

Create a believable scenario

Looking over your shoulder

Compromise websites frequently visited

• Leaving something tempting

• Offering something free in exchange

• Create a believable scenario

• Looking over your shoulder

• Compromise websites frequently visited

How does malicious software get on to a computer?

​“Cyber security is the name for the safeguards taken to avoid or reduce any disruption from an attack on data, computers and mobile devices”.

Cyber security covers:

confidentiality

privacy

and also

availability

integrity

"That's a bit about general cyber security but what about what I'm going to be doing for my job..."

Multiple Choice

What is the cloud?

• A physical storage device that looks like a fluffy white cloud

• A network of remote servers accessed over the Internet to store, manage, and process data

• A type of wireless network that connects devices in a specific area

• A special type of computer that only runs weather forecasting software

Where are companies keeping their computer systems and data?

In the ‘cloud’

Consider the Security
implications of using any third-party technology
and/or code.

Match

Match the following

• Zero Day Exploit

• Person in the Middle

• Denial of Service

• SQL Injection

• Cross Site Scripting

A vulnerability that is exploited before the vendor is aware of it

A type of attack where the attacker intercepts communication

An attack that aims to make a service unavailable

A code injection technique that targets databases

A security vulnerability that allows scripts to be executed in the user's browser

• A vulnerability that is exploited before the vendor is aware of it

• A type of attack where the attacker intercepts communication

• An attack that aims to make a service unavailable

• A code injection technique that targets databases

• A security vulnerability that allows scripts to be executed in the user's browser

Empowering Actions

Reporting suspicious activity
Stay Informed

Cybersecurity is about empowerment and taking control of your digital life, not just fear and avoidance.