Identifying Potential Risk, Response, Recovery

3.4 summarise the types of risks that may be involved in assessment in own area of responsibility.

Users can be the main risk to an organization. A disgruntled employee can access the server and open it up to all types of security issues or install malware or virus’. User access to the server should be limited to users that need admin level and closely monitored. Admin accounts should never be used for day-to-day activities as this could lead to username/passwords being stolen more easily providing access to others from the outside. When an employee leaves their admin and general use accounts should be turned off immediately. If an employee is to be terminated with cause, theses accounts should be disabled prior to the termination discussion. Users risk are medium impact and highly controllable with policy and procedures.

Wm. Arthur Conklin, G. W. (2012). Principles of Computer Security: CompTIA Security+™ and Beyond (Exam SY0-301), Third Edition. In G. W. Wm. Arthur Conklin, _Principles of Computer Security: CompTIA Security+™ and Beyond (Exam SY0-301), Third Edition_ (p. Chapter 20). McGraw-Hill Company.

Within in my own setting one of my roles is to promote individuals’ independence but in the same time we have to protect them from harm and danger. Everybody takes risks in everyday living therefore people living in care homes should be able to that, too. When we look after our residents, we make sure that they are aware of any risks involved, e.g. before they go out. Risk assessment is completed. Risk assessment covers many areas like showering themselves, going out on their own. We do them with our residents to identify what they want, what risks it involves, and how they can be avoided or minimized.

Many business owners must examine what is at risk when they communicate sensitive data over email. The first thing is to make sure that a good virus protection software is install and updated on everyone computer place. Second it is good that all key departments within the organization, such as legal IT and H, understand the policies; require them to sign off on the email filtering, retention, retrieval and analysis policies (Small Business Computing Staff, 2011).

Data security; affinion security center augments data breach solution. (2012). Information Technology Newsweekly, , 91. Retrieved from http://search.proquest.com/docview/926634711?accountid=458

Group activities included learning the levels of recovery and relapse, completing the Grief and Loss handout, and discussing steps and skills to use to handle the high-risk situation to prevent relapse. Mr. Fulson moderately participated in the group activities. Reported his cousins were in town for the weekend, which was a high risk situation for him as his cousins are drinking alcohol. He stated that using of forecasting skills to think through the situation before joining them for BBQ. Stated “I asked my mom to help me. I was able to have fun with my cousins without engaging in drinking activity”. PO appeared to be calm and fully communicative throughout the group process.

Papa (2011), indicated to combat these issues administrators must consider protective measures for both internet and technology use (p.198). Protocols for teaching students how to use the internet appropriately must be put in place (Papa, 2011, p. 198). Antivirus and protection software must also purchased to “prevent extensive damage to existing computer systems” (Papa, 2011, p.198). Regrettably, despite our best efforts to maintain network security we must still face the possibility of people or physical threats such as:

Reasonable precautions should be taken in order to ensure the safety of personal files that may be on the user’s computer as they navigate through the Internet. Each situation is different.

Stallings, W., & Brown, L. (2012) Computer security: Principles and practice (2nd ed.). Boston, MA: Pearson.

It would be best to apply antivirus programs especially on emails and email quadrating to identify unknown file types and catch any unsafe programs trying to come into the organization. The ability to block outbound traffic that may be accessed during normal work procedures. Also to have some type of file transfer or monitoring on unknown files types received by employees. These programs will all assist in maintaining security and integrity for the organization’s sensitive information (Kim & Solomon, 2012).

Conklin, W. A., White, G., Williams, D., Davis, R., & Cothren, C. (2012). Principles of computer security: CompTIA Security+™ and beyond (3rd ed.). New York, NY: McGraw Hill.

8. No personal security measure may be taken unless authorized by upper management. I.E Personal anti-virus program.

Recommendation: When browsing always remember to use high level SSL encryption to keep your data safe.

I recommend including an anti-malware software and firewall application that would detect, block, and compliment the anti-virus software in providing brilliant protection is vital. The firewall will monitor the network traffic and connection attempts in and out of a network or computer and determines whether to allow it to pass