WorksheetsISACA - 27 Jun Digital Risk Resilience Workshop Quiz
Total questions: 15
Worksheet time: 8mins
What is e-commerce security?
Laws pertaining to selling goods on the internet
Steps & protocols to protect sale & purchase of goods & services online
Finding the right buyer for your online goodsTrusting sellers to pro
Trusting sellers to provide genuine goods
What is a common ecommerce security issue for ecommerce site owners?
Customers are not spending enough
Receiving complaints about speed of delivery
There are too many payment options
Customers are lured to fake websites
What is a good e-commerce security best practice?
Sharing passwords with staff members to minimize confusion
Use HTTP hosting
Comply with PCI-DSS requirements
Ask customers for lots of personal data for marketing purposes
Information leakage can be due to:
An insider taking a data dump
Unauthorized access using social engineering
Third party not meeting security best practices
All of the above
Who should be educated to help prevent ecommerce hacks?
All customers and staff / employees
Only long serving staff / employees
Only frequent customers
Only vendors
What is personal identifiable information?
NRIC
Bank account number
Employee ID
All of the above
What are some of the main principles of data protection?
The customer is always right
Keep customer data as long as possible – you may need it later
Use short, easy to remember passwords
Never reach out to customers to update their particulars
How to ensure your backup strategy is good?
One copy is enough
No need to waste time to test if backup can be restored
Store backup offsite to prevent single point of failure
There is no need to update your backup versions regularly
When it comes to ransomware:
Never pay the ransom
Invest in cybersecurity awareness training for your employees
It only infects unlicensed software
All of the above
What will help reduce the impact of data breaches?
Timely detection, containment and remediation
Detection and containment
Good remediation (e.g. having a good backup)
None of the above
You've received a call saying your passport is cancelled & you'll be jailed unless you pay a fine to a private account
Phishing Attack
Not a phishing attack
You have received a file!
Phishing attack
Not a phishing attack
You signed up for a travel planning service
You want them to scan your email, but take a close look
Phishing attack
Not a phishing attack
You have received a fax
Phishing attack
Not a phishing attack
You are out of storage
Phishing attack
Not a phishing attack
