IAS Summative

Employees use their personal email addresses to share client documents.

• Compliance

• Non-Compliance

All company laptops are encrypted, and users are required to use strong passwords.

• Complaince

• Non-Compliance

A client database was accidentally exposed online for two hours due to a misconfigured server.

• Compliance

• Non-Compliance

Employees receive annual security awareness training.

• Compliance

• Non-Compliance

A former employee's access to company systems was immediately revoked upon their departure

• Compliance

• Non-Compliance

The company does not conduct regular vulnerability scans of its network.

• Compliance

• Non-Compliance

Sensitive data is stored on easily accessible shared drives without access controls.

• Compliance

• Non-Compliance

The company has a documented incident response plan.

• Compliance

• Non-Compliance

Employees are encouraged to report any suspicious activity without fear of reprisal.

• Compliance

• Non-Compliance

Passwords are shared between team members for convenience.

• Compliance

• Non-Compliance