Please enable JavaScript.

Coggle requires JavaScript to display documents.

1.6 System Security - Coggle Diagram

- - - - Strong security software such as anti-malware
      - Enabling OS and secuirty software updates
      - Staff training: being cautious of opening email attachments and downloading software
      - Backup files regularly onto removeable media
    - - Files are deleted, corrupted or become encrypted
      - Computers crash, reboot spontaneously and slow down
      - Internet speeds slow down
      - Keyboard inputs are logged then sent back to the hackers in search for entered passwords and usernames
  - - - Accessing a victims account to withdraw money, or purchase goods and services
      - Opening bank accounts and cashing illegal cheques
      - Gain access to high value data
      - Financial services can blacklist the company which affects the brand reputation
    - - Strong security software such as fraud detection
      - Staff training: aware of spotting fake emails and websites
      - Staff training: not disclosing personal information
      - Disabling browser pop-ups
  - - - Theft of data
      - Access to corparate systems
    - - Network lockout policy (locks out after 3 wrong password attempts)
      - Using progressive delays
      - Staff-training: Use strong passwords with symbols, uppercase, lowercase and numbers.
      - Using challenge response such as reCaptcha
  - - - Loss of access to service for the customers
      - Lost revenue
      - Lower productivity
      - Damage to reputation
    - - Strong firewall
      - Packet filters on routers
      - Configuring the web server
      - Good network policy: audits, logs and monitoring
  - - - Usernames and passwords compromised, allowing unauthorised access to systems
      - Theft of data
    - - Encryption
      - Using virtual networks
      - Staff training: Use of passwords, locking computers, logging off, use of portable media
      - Network forensics
  - - - Contents of databases can be output, revealing private data
      - Data in database can be edited
      - New rogue records can be added to the database
    - - Validation on input boxes
      - Using parameter queries
      - Setting database permissions
      - Penetration testing