Data Security

Data Security

1. Types Of Threat

   • Outside Organisations Control
     • Natural disaster, fire etc.
     • Loss of data + equipment
   • Frequency of occurrence can be controlled
     • Hardware/ Software fault, Operator error
     • Inaccurate data, data loss, freezing
   • Internet Threats
     • Hackers, Viruses
     • Data loss, Stolen data, deletion/ manipulation of data
   • Insecure Communication
     • Intercepted calls, emails, or letters
     • Employees deleting secure data
   • Unauthorised Access to Premises
     • Break Ins
     • Damage, Loss of data or equipment
   • Sabotage
     • Accessing and deleting/ amending/ sharing secure data
     • Increased competition, wrong info, no info

2. Main Characteristics

   • Audit Trail
     • Identity of logged in users
     • Time during which user is logged on
     • Terminal user logged on to
     • Resources accessed by each user
     • Unsuccessful attempts
   • Access Controls
     • Only certain users access certain files
     • Specific user rights
   • Physical Security
     • Locks etc
     • No unauthorised physical access
   • Passwords
     • Unique
     • Only known to user
   • Secure Coms.
     • Encryption
   • Anti Virus
     • Scans and Quarintines infected files
       • Reduces damage
   • Personnel Security
     • Visual Deterrent