Following someone on social media

Using someone else’s login credentials

Entering a restricted area by following someone closely

Spying through a camera

It might get stolen and reused

Someone could load malicious software onto it

It could cause data overload

It might overheat

A. Dumpster diving

B. Shoulder surfing

C. Phishing email

D. Device theft

Throwing away old electronics

Retrieving sensitive information from discarded materials

Searching through data archives

Exploring old digital files

Disabling Bluetooth

Installing antivirus software

Using a privacy screen

Changing your password frequently

It protects you from online scams

It ensures faster Wi-Fi access

Let them use it while you watch

Ask for their ID

Politely decline and report it if necessary

Give access only to the browser

A laptop suddenly runs faster

Cables are more organized

Devices have unexpected parts or loose connections

A screen is brighter than usual

Turning off Wi-Fi

Carrying your device at all times

Encrypting your emails

Avoiding public places

Noise-canceling headphones

Laptop lock

USB splitter

Wireless mouse

Tracking GPS location

Listening or watching someone's private information

Reading documents left on desks

Accessing network traffic

Increased system performance

Reduced data storage

Data loss and corruption

Improved system availability

Using a single layer of defense

Building a layered defense

Maximizing system complexity

Reducing the frequency of backups

Creating fake invoices to trick employees or vendors

Spreading false narratives about cyber threats

Gaining entry to a restricted area without proper authentication by following an authorized person

Manipulating or creating fake emails that appear to be from a legitimate brand

Sending emails with exaggerated threats

Creating fake social media profiles

Demanding immediate action or access by making it appear to be an emergency

Using technical jargon to confuse the target

A. Establishing clear verification processes for access to restricted areas

B. Allowing employees to hold doors open for everyone

C. Disabling security cameras in entry points

D. Encouraging visitors to bypass security checks

Providing personal information to unknown individuals

Ignoring verification processes to speed up operations

Volunteer information freely to appear cooperative

Checking credentials, calling for proof, and verifying the identity of individuals

Fishing for compliments on social media

Attempting to gain sensitive information through electronic communication by posing as a trustworthy source

Using real fishing as a metaphor for online security

Sending out random emails without a specific target

Being cautious with sharing personal information

Clicking on all email links

Ignoring security updates

Using the same password everywhere

Lack of security software

Lack of proper computer hardware

Exploitation of human biases and emotions

Lack of encryption on communication channels

To serve as educational tools for employees

To trick employees into providing sensitive information

To discourage employees from reporting suspicious emails

To avoid addressing social engineering tactics

Spoofing

Logic Bomb

Dumpster Diving

Black Hat

Trojan

Worms

Denial of Service(DOS)

Zero Day Exploit

RootKits

Zero Day Exploit

DOS

Man In the Middle(MitM)

Natural disaster

Cyber attack

Supply chain disruption

Employee errors

Integrity

Authorization

Intrusion

Confidentiality

Availability

Deleting an access card’s data to prevent use

Creating a duplicate of an authorized user’s access card to gain unauthorized entry

Encrypting an access card so only authorized readers can read it

Logging every use of an access card for audit purposes