Cybersecurity Threats for AT

• ​ (a)   to sensitive data copies customer information and shares it outside the company. This causes ​ (b)   and loss of trust. The enterprise ​ (c)   monitor user activity, and apply the ​ (d)   so staff only access ​ (e)  

• A worker with access
• legal issues
• should use access control,
• least privilege principle
• what they need.

​ (a)   the same​ (b)   across many systems. Hackers ​ (c)   from another site to log in. This leads to ​ (d)   and data breaches. ​ (e)   enterprises should enforce strong passwords, use MFA, and limit login attempts.

• A user reuses
• password
• use stolen passwords
• unauthorised access
• To prevent this,

• ​ (a)   an attachment that ​ (b)   The system becomes​ (c)   and the attacker ​ (d)   This stops ​ (e)   and may cause data loss. The enterprise should use regular data backups, anti-malware software, and staff training to avoid suspicious downloads.

• An employee downloads
• installs ransomware.
• locked
• demands payment in Bitcoin.
• business operations

• A hacker​ (a)   and asks an employee for login details. The ​ (b)   them and shares access. This leads to system compromise. Enterprises should ​ (c)   use security policies, and ​ (d)  

• pretends to be IT support
• employee trusts
• train staff to verify identity,
• never share passwords.

• A staff member in a company ​ (a)   that looks like it is from Microsoft asking them to reset their password. They ​ (b)   and enter their login details. This allows hackers to access the enterprise system ​ (c)   which damages trust and may break privacy laws. To reduce this risk, the enterprise should ​ (d)   use multi-factor authentication (MFA), and apply email filtering systems.

• receives a fake email
• click the link
• and steal customer data,
• train staff to recognise phishing emails,

• A worker with access to sensitive data ​ (a)   and shares it outside the company. This causes​ (b)   of trust. The enterprise should​ (c)   monitor user activity, and apply ​ (d)   so staff only access what they need.

• copies customer information
• legal issues and loss
• use access control,
• the least privilege principle

• Customer data is stored ​ (a)   in a database. Hackers access the database and steal ​ (b)   This ​ (c)   like the Australian Privacy Principles (APPs). Enterprises should ​ (d)   secure storage, and access permissions.

• without encryption
• personal information.
• breaks privacy laws
• use encryption,

• Attackers use ​ (a)   (botnets) to flood a company website with traffic. The ​ (b)   and customers ​ (c)   This leads to financial loss. Enterprises should ​ (d)   and cloud-based protection systems.

• many infected computers
• website crashes
• cannot access services.
• use firewalls, traffic filtering,

• A worker ​ (a)   from an unsafe website. The software contains malware that ​ (b)   This can damage files ​ (c)   Enterprises should ​ (d)   restrict downloads, ​ (e)  

• downloads free software
• spreads through the system.
• and steal data.
• install anti-virus software,
• and educate users.

• A user connects to public ​ (a)   A hacker ​ (b)   the data being sent. Sensitive information like ​ (c)   To reduce risk, enterprises should ​ (d)   such as SSL/TLS, VPNs, ​ (e)  

• Wi-Fi without protection.
• intercepts
• passwords can be stolen.
• use encryption
• and secure networks.