IT security instruction

If you have three differents accounts :

1.Google

2.Microsoft

3.Slack

What do you need to think of regarding our security regulations?

• The password may not be reused in multiple services

• You can use the same password for all your company accounts

• Reuse your private password (Social Media) to your company accounts

• Combine a strong password with 2 factor authenthicator

What should you do with unnecessary files (documents) in your devices (Pc) ?

• Keep all and send to my Gdrive

• Keep them in my Laptop (no Gdrive)

• Create a folder with unnecessary files and put them there

• Delete all unnecessary files from my pc

Where do you store the company passwords?

• Excell file

• In a papper

• 1Password

  or

  Keychain

• In my browser

When do you need the VPN connection ?

• In the office

• Coffee Shop + travel+ Hotel Wifi + Home

• When I play games

Access to passwords, tokens and accounts must be requested and approved by ?

• IT- admin

• Employees manager, ISO or CIO

• Finance department

• Legal department

Which reason is correct regarding why you need to lock down your computer when you leave your desk?

• To prevent that your colleague pranking you through slack announcements.

  "Can you please send me money, I need some food"

• 
• To prevent unauthorised access to data

• To save money on the electricity bills

What do you need to do about requests for access to data information, services etc?

• Ask and double-check with the employee's manager

• Give information without asking

• Do not aswer and let your colleague fix it

• Do nothing

What is correct in SaveLends guidelines?

• Employees can install everything in their computers and visit unsecure sites

• Employees workstation and its hardware are property of SaveLend and can be sold to another person

• Employees can leave their computer unattended. It is not necessary to lock it when they are away from their computer

• All installation and configuration of hardware must be done by or in consultation with SaveLend IT department

What is correct when we talk about incident reporting?

• The employees manager will escalate the incident according to internal incident reporting routines

• Fix the problem and do not give information to the manager

• Incident needs to be reported to the employees manager

• Not reacting about the incident and let someone else react

What is true about Information storage in order to protect employees work and the information they produce in their work?

• All material must be stored on my computer and never in G-drive

• G-drive help us to prevent file loss in case of rasomware or other incidents

• The company pay for it so I need to use it