Chapter 14, Problem 6RQ

Explanation of Solution

Contractor being a serious threat to their organization’s information systems:

Contractor is a kind of employee who is related to the main part of the organization or project. In an organization, a contractor can be a service provider or hardware provider.

The reasons for considering a contractor as a serious threat to their organization’s information system are as follows:

• The insider contract employees will be having a better understanding about the modules such as Id, password, database, etc. Therefore, this information can be stolen by them for further use or someone else.
• Insiders have a good knowledge in coding as well as in the operation of altering. That is the reason why the company uses limited access to the contractor employee for security reasons.
• To reveal the information, there are chances that the hacker or attacker may give bribe to a contract employee...