BTEC DIT C3 LAB - Internal Threats

Internal Threats to a company can be...

• Employees visiting untrustworthy websites

• Employees bringing in portable devices containing malware

• Someone hacking a computer from across the internet

• Someone flooding the company website with traffic and data to take it down

What are 2 internal threats to a company?

• Staff passing confidential information on

• Users overriding security controls

• Misuse of equipment

• Getting hacked and viruses

What does a ‘rogue employee’ mean?

• Worker who may steal or damage data from within

• Worker who does not follow the rules of their company

• Worker who now works for another company

• Someone who never worked for the company

How can you protect against internal threats? (Choose all that apply)

• Restricting online downloads

• Regularly train staff members

• Use correct access rights for everyone

• Restrict use of removable media

Unsafe IT practice by an employee is an example of an internal security threat?

• True

• False

If an employee accidentally deletes data it is an example of what type of security threat?

• Internal
• External
• Physical

Ransomware is an example of what type of security threat?

• Internal
• External
• Physical

How can an employee using a USB stick be a threat to an organisations' data? (Choose all that apply)

• It could cause a DOS attack

• It could carry a virus that infects the employer's computers

• Confidential data could be stored on it and removed from the organisation

• It can be used to phish for information.

Which of the following actions, that an employee could carry out, are malicious? (Choose all that apply)

• Creating fake invoices

• Leaving a USB stick which contains confidential data on the bus.

• Overriding security controls to access data they shouldn't be able to access.

• Visiting a website which turns out to contain downloadable viruses

Which of the following can be impacts of a security breach? (Choose all that apply)

• Downtime leading to loss of productivity

• Legal action

• Increase in sales

• Damage to the image of the organisation