100% Zufriedenheitsgarantie Sofort verfügbar nach Zahlung Sowohl online als auch als PDF Du bist an nichts gebunden
logo-home
Vorher von dir gesucht
Vorher von dir gesucht
logo
Summary Unit 11 - Cyber Security and Incident Management Notes (DISTINCTION ACHIEVED) (60 PAGES) 16,04 €
In den Einkaufswagen
Navigiere schnell zu
Vorschau
  2.  
  3. PEARSON (PEARSON)
  4.  
  5. Information Technology 2016/2017 NQF
  6.  
  7. Unit 11 - Cyber Security and Incident Management

Zusammenfassung

Summary Unit 11 - Cyber Security and Incident Management Notes (DISTINCTION ACHIEVED) (60 PAGES)

3 rezensionen
 14 mal verkauft
  • Kurs
  • Unit 11 - Cyber Security and Incident Management
  • Hochschule
  • PEARSON (PEARSON)

These are my notes that cover the all of the topics and will help you build good knowledge to be ready for Unit 11 - Cyber Security & Incident Management exam. I achieved a overall grade of distinction for the exam using my notes for revision. Around 15 different topics are covered through 60 p...

[ Mehr anzeigen ]
Letzte Aktualisierung vom Dokument: 9 Monate vor

vorschau 4 aus 58   Seiten

Dokument Information

  • 30. januar 2024
  • 24. april 2024
  • 58
  • 2023/2024
  • Zusammenfassung

Themen

  • unit 11
  • cyber security
  • btec
  • information technology
  • unit 11 cyber security
  • unit 11 notes
  • unit 11 exam notes
  • cyber
  • cyber security and incident management
  • unit 11 cyber security and incident management

Schule, Studium & Fach

  • BTEC
  • PEARSON (PEARSON)
  • Information Technology 2016/2017 NQF
  • Unit 11 - Cyber Security and Incident Management
Alle Dokumente für dieses Fach (45)

3  rezensionen

review-writer-avatar

von: fantasyinspirify • 1 Monat vor

review-writer-avatar

von: mowahimukhtaar • 2 Monate vor

review-writer-avatar

von: emran7002 • 4 Monate vor

Verkäufer

avatar-seller
Alex567

Deine Reviews

Inhaltsvorschau

Unit 11 Notes

Internal Threats
An internal threat refers to the risk of somebody from the inside of a company who
could exploit a system in a way to cause damage or steal data.

Employee Sabotage and Theft

● Employees have the privilege of accessing a wide range of physical equipment
inside the company.
● Hardware like hard drives, which could contain a lot of important data, can be
physically stolen from the company or the data can be stolen by transferring it
onto an external hard drive or a USB stick.
● Employees could damage equipment or data by deleting the data, or smashing a
hard-drive.

Unauthorised access by employees

● As employees have access to these systems within a company, they may be able
to gain access through a colleague who leaves themselves logged in, or a room
left unlocked providing access to a server.
● They could also obtain administrative privileges that allow them to perform
administrative functions, such as changing rights of other users or deactivating
network security tools.

,Weak Cyber Security Measures and Unsafe Practices

● By not having appropriate digital and physical security, the company increases
the chance of a vulnerability being exploited.
● For example, if the servers’ for a company’s network are left in an unlocked room,
anybody can walk into it and damage/steal property. This can be an employee or
a visitor who hasn’t been properly security checked.
● Another example, security vulnerabilities may be accidentally exploited by an
ordinary employee, by viewing an untrustworthy website - a virus can be
unintentionally downloaded that can affect the whole network.

Physical Ways to protect your physical security network (Server):

● Security Cameras
● Lock rooms
● ID Doors or swipe card access (this means trusted visitors get an ID badge)
● Privacy Screens

Accidental Loss or Disclosure of Data

● Simple accidents can occur such as a person may carry their laptop to and from
work, they might forget it on the train back home one day - this means that
anybody can get a hold of the laptop and access it.
● Employee simply accidentally deleting data from a folder or spilling a drink on a
device.



External Threats
An external threat refers to the risk of somebody from the outside of a company who
attempts to exploit system vulnerabilities through the use of malicious software,
hacking, sabotage or social engineering.

These are much harder to deal with compared to internal threats as you cannot monitor
people from the outside.

Malicious Software

● Spyware gathers information on the user it has infected, secretly sending it away
to third-party sources - keyloggers can track what you type such as passwords.

, ● Viruses modify existing programs with malicious code and constantly replicate
itself throughout a computer, this causes the corruption of data and applications,
system failure and takes up storage or processing power.
● Worms are similar to viruses, however they can replicate themselves through a
network to spread to other computers, rather than through infecting files that are
spread. This allows them to perform similar functions to viruses but on a larger
scale.
● Rootkits are used to get unauthorised remote administrator access to a
computer or network. These are spread through by hiding in software that
appears to offer legitimate functionality.
● Trojans are malicious code that hides within a seemingly legitimate program.

Hacking

Hacking is a general term that describes the exploitation of vulnerabilities in a computer
system to gain unauthorised access to the system and its data.

There are a broad range of motivations which can be carried out by an individual,
company or government;

● Individual - profit to protest to recreation, actions for a political or social agenda
or simply to cause harm.
● Companies and Governments - will hire others to hack themselves (white
hackers) which is used to detect system vulnerabilities to prevent threat from
malicious (black hat) hackers.

Sabotage

Sabotage is a general term that describes an activity to deliberately disrupt services,
through the use of:

● Denial of service attacks
● Distributing malware
● Physically destroy computer equipment.

These can be carried out by individuals, terrorist organisations, companies or
government. Sabotage is specifically malicious, with the goal of causing damage.

Social Engineering

, Social engineering involves deceiving people into revealing private and confidential
information.

A common form of social engineering is phishing, which involves a user pretending to
be a trusted organisation, asking for another individual’s details.




Impact of Threats
No matter how much preparation goes into preventing an acting upon existing threats, it
is likely that some kind of damage will still be caused.

Impact level of the damage can be financial, operational, reputation or intellectual
property loss.

The types of Impact

Operational Loss

Operational loss refers to damages of the operating capability of an organisation. For
example, a business whose operations rely on IT systems can be prevented from
performing any work due to cybersecurity threats.

Financial Loss

● Financial Loss refers to damages to the wealth of an organisation, this includes
losses, compensation and legal fees.
● By financial loss, we mean actual increased costs, reduced income, caused by
the threat. This could be replacing damaged equipment or loss of sales due to
your website being down.
● Compensation fees and legal fees come as a result to compensate customers
that are affected by the threat and pay data protection fines placed on the
business.

Reputation Loss

● Reputation loss refers to the loss of trust and lower opinion of people to a
business as a result of them being affected by a threat.
● Customers no longer want to do business as they have concerns over whether
the service will be available (going down due to cybersecurity threats).

Alle Vorteile der Zusammenfassungen von Stuvia auf einen Blick:

Garantiert gute Qualität durch Reviews

Garantiert gute Qualität durch Reviews

Stuvia Verkäufer haben mehr als 700.000 Zusammenfassungen beurteilt. Deshalb weißt du dass du das beste Dokument kaufst.

Schnell und einfach kaufen

Schnell und einfach kaufen

Man bezahlt schnell und einfach mit iDeal, Kreditkarte oder Stuvia-Kredit für die Zusammenfassungen. Man braucht keine Mitgliedschaft.

Konzentration auf den Kern der Sache

Konzentration auf den Kern der Sache

Deine Mitstudenten schreiben die Zusammenfassungen. Deshalb enthalten die Zusammenfassungen immer aktuelle, zuverlässige und up-to-date Informationen. Damit kommst du schnell zum Kern der Sache.

Häufig gestellte Fragen

Was bekomme ich, wenn ich dieses Dokument kaufe?

Du erhältst eine PDF-Datei, die sofort nach dem Kauf verfügbar ist. Das gekaufte Dokument ist jederzeit, überall und unbegrenzt über dein Profil zugänglich.

Zufriedenheitsgarantie: Wie funktioniert das?

Unsere Zufriedenheitsgarantie sorgt dafür, dass du immer eine Lernunterlage findest, die zu dir passt. Du füllst ein Formular aus und unser Kundendienstteam kümmert sich um den Rest.

Wem kaufe ich diese Zusammenfassung ab?

Stuvia ist ein Marktplatz, du kaufst dieses Dokument also nicht von uns, sondern vom Verkäufer Alex567. Stuvia erleichtert die Zahlung an den Verkäufer.

Werde ich an ein Abonnement gebunden sein?

Nein, du kaufst diese Zusammenfassung nur für 16,04 €. Du bist nach deinem Kauf an nichts gebunden.

Kann man Stuvia trauen?

4.6 Sterne auf Google & Trustpilot (+1000 reviews)

45.681 Zusammenfassungen wurden in den letzten 30 Tagen verkauft

Gegründet 2010, seit 15 Jahren die erste Adresse für Zusammenfassungen

Starte mit dem Verkauf
16,04 €  14x  verkauft
  • (3)
In den Einkaufswagen
Hinzugefügt