Cyber Security Threats and Counters

Cyber Security Threats and Counters

1. Availability

   • Ensuring that the data is available to those who need it when they need it.
   • does it require a network or internet connection?
     • Cloud storage
       • local backup for key items
         • SD card, USB disk, CD or DVD
   • Does everyone have the right access level?
     • check everyone's access levels are right when they are assigned
   • Do staff know how to access it?
     • ensure staff are properly trained
     • Instruction manual
   • Power cuts
     • Reboot systems when power goes
     • Generator or batter backup
   • Natural disasters
     • Back ups of the data if it is compromised
       • different locations
   • Accidental damage
   • Deletion of data
   • Man made disasters
     • Fire proof safes with the data inside

2. Integrity

   • Ensuring that the data is accurate and trustworthy.
   • Change are not updated
     • software that automatically updates files
     • emails / letters
     • allow people to update
       • phone call
       • website
   • input errors - typos
     • verify the data that has been inputted
     • Scan the data (OCR)
     • Validattion
   • Original information is wrong
   • Accidental deletions
   • repeated data in different areas
     • make sure to look at every file with data in so it can be changed
     • Have a system that checks every file to see if data has been entered
     • database normalisation

3. Confidentiality

   • Making sure that only authorised users have access to the data.
   • Trojan / Virus
     • Anti - virus software
       • Keep up to date
         • Central application server
     • Firewall
       • Prevents unwanted or unauthorised communication over a network
       • Prevent data from being sent out of the system
     • Staff training on file risks
   • Phishing
     • notify someone with a higher authority when getting suspicious emails
     • Spam filters
       • automatic
     • Educate staff on risks of emails
   • Escalation
     • A user who already has legal access to a system finds a way to gain additional access / access levels.
     • Horizontal
       • A user gaining access to other accounts of a similar level e.g. a student gaining access to another students account.
     • Vertical
       • A user gains access to accounts with greater security privilege / data access  
   • Obtaining another user's passwords
     • don't tell anyone else your password
     • cautious when typing password in your computer
     • Ensure obfuscation is used for passwords
   • Unattended devices
     • Lock the doors
     • biometrics in high security areas
     • CCTV
     • Log out when not in use
       • Auto log off / lock
   • Unauthorised network access
     • Change passwords regularly
     • 2 part authentication
     • Firewall
   • Internal mal practice
     • Workers will steal data or pass it on to other people.
     • Get employees to read and sign an AUP
     • Background checks on employees
     • Remote desktop surveillance
     • Audit trails
       • A system where each access of a system / file / login is recorded on a server.