Securing The Weakest Link With Security Training

Kim, D., & Solomon, M. G. (2012). Fundamentals of Information Systems SecuritY. Sudbury: Jones & Bartlett Learning.

In today’s IT world every organization has a responsibility to protect the information and sensitive data they have. Protecting data is not only responsibility of security and IT staff but every individual is involved in protecting the information. The risks to information security are not digital only, but it involves technology, people and process that an organization may have. These threats may represent the problems that are associated to complex and expensive solution, but doing nothing about these risks is not the solution.

I am Professor Kirk Mooring and I will be your instructor for this class. In this class, you will learn the fundamental core theories of information and network security. In this course, you will learn and use technology skills that are in demand in today’s job market. With so many threats and vulnerabilities created daily that we have to learn to work as a team in order to protect our data with the appropriate security safeguards. You will study the concepts that will help you evaluate and mitigate risk by selecting the appropriate security controls and technologies.

In the final chapter of CompTIA Security + Study Guide eBook, it covers some great topics, key elements of implementation, support, and managing the security efforts in a company or organization. It’s important for IT Professionals to understand their role in a company/ organization. It’s also extremely important for them to understand the boundaries of security within that company/organization. Adopting best security practices while adhering to company policies will ensure that both parties are happy. There are many fines lines with security management.

Information security enabled by technology must include the means of lowering the impact of intentional and unintentional errors entering the system and to prevent unauthorized internally or externally accessing the system  actions to reduce risk data validation, pre-numbered forms, and reviews for duplications. It is crucial that the mission plan include the provision of a disaster recovery and business continuity plan. On the other hand, there is much more intrusion activity today than ever before. Obviously, there is an increased concern for attacks through companies’ network in an effort to either commit malice or affect the integrity of an organization’s most valuable resource. Therefore, it is important that companies do not get complacent in their IT infrastructure security. The fact of the matter, there is no perfect system; however, it behooves organizations to protect their information by way of reducing threats and vulnerabilities. Moreover, Whitman and Mattord (2010) said it best, “because of businesses and technology have become more fluid, the concept of computer security has been replaced by the concept of information security. Companies

In today’s world it is highly impossible for any kind of business to function without the assistance of technology. Any company that relies on digital data and computer networks have exposure to a host of varying Cyber Attacks. As technology continues to evolve, cyber security breaches become even more difficult to solve. The cybersecurity world rightly believes in the maxim – It’s not if, it’s when!

Whitman, M. E., & Mattord, H. J. (2014). Management of information security (4th ed.). Boston, MA:

Confidentiality, Integrity and Availability are the three hardest aspects to preserve in information Security. Confidentiality, being the most important aspect, is the prevention of unauthorized disclosure of information. Integrity protects the information within the document by making certain that only authorized users and parties can modify the information. Lastly availability insures that information and services are available when needed. These three aspects form a bond between companies and consumers insuring the information is in safe hands. However, IT systems and networks are prone to more malicious attacks then ever before and the number of computer crimes is increasing every day. Examples include Hacking, Viruses and vulnerabilities,

Data security failures cause significant damage to a company. The level of harm caused determines the extent of ruin. It might go as far as forcing businesses to close down. The non-compliance with regulations has made data security quite a big deal. It is the duty of a company’s information officer to ensure the privacy and security of the company’s customers’ information and, most importantly, the company’s data parse. Contrary to the public perception that hackers are the leading cause of data breaches, as they are portrayed in movies, the greatest threat (namely the way these hackers get their information) is actually the employee’s unawareness. In a recent study, it was identified that inadequate employee training and a lack of threat awareness are actually the major threat to data privacy and security.

It should not be a surprise that the biggest vulnerability in Cybersecurity is the user (Goldman, 2010). The vulnerabilities presented by the user fall into two general categories: (1) accidental and (2) malicious. Vulnerabilities are important to those that are trying to perform unauthorized actions on an information system. For this paper, the term information system is being used generically to be anything from a home computer to a global enterprise encompassing numerous servers and storage systems. These unauthorized actions are threats to the information system. While not all vulnerabilities create threats, even a single vulnerability puts the information system at risk.

There are many security organizations and associations all around the world that strive to make the cyber world and the physical world a safer place. Each of these organizations and associations offer their own solutions for security threats. These organizations and associations are helpful in preventing many different types of security breaches and are necessary for the continual protection of both business and people as they continue to develop more advanced technology. Without these organizations and associations, security would be a very disconcerting topic for many individuals.

Due to the huge dependence on Information Systems by many people, issues threatening Information Systems also threaten most activities (Zisssis, 2012). The critical role that Information Systems plays in many activities as it has been developed to perfection but is challenged by many obstacles such as spamming, hacking, etc. which threaten their reliability and security.

Recommendation to plan and implement a security policy in order to protect our financial, intellectual and customer data from external threats. The rising number of cyber security attacks is a problem that is growing more advanced everyday. In 2014 cyber attacks against large corporation increase 40 percent from the previous year (Carey, 2015). Due to these threats small businesses through large multi-national corporations are under immense scrutiny as to how they are dealing with protecting their intellectual property and sensitive customer data from being lost, stolen or modified. Computer hackers are constantly finding more creative ways to exploit security holes in networks, computer systems and web e-commerce sites.

Lastly, human-caused threats are another essential part to protect organizational interests. The understanding of trends used for proper access control and exploits needs to be implemented. It is important for industry leaders to become involved in legislation to guide judicial organizations in the prudent and informed establishment of

Safety of information is the most valuable asset in any organization particular those who provide financial service to others. Threats can come from a variety of sources such as human threats, natural disasters and technical threats. By identifying the potential threats to the network, security measure can be taken to combat these threats, eliminate them or reduce the likelihood and impact if they should occur.