Please enable JavaScript.

Coggle requires JavaScript to display documents.

cyber - Coggle Diagram

- - - - Data is raw facts and figures that have no meaning. When this raw data is put into context, it becomes information. This information will then be used to make decisions and predict trends.
      - You will use data and information every day to make decisions.
      - Facebook and Twitter are free for users. However, while you may not pay a monthly subscription fee, the price you pay is allowing these social media companies to share your data, which could possibly be used to influence your decisions. For example, Facebook shared data with Cambridge Analytica and this data may have been used to influence the election of US President, Donald Trump.
- - - - current employees
      - competitors
      - criminals
      - former emlpoyees
    - - money
      - finacial details
      - customer information
      - Product designs and prototype specifications
      - reputation
  - - - small company
        
        less than 50 employees
        
        annual turnover
        
        less than 6.5m
      - medium company
        
        less than 250 emplyoyees
        
        annual turnover
        
        less than 12.9M
      - large company
        
        over 250 emplyoyees
        
        annual turnover
        
        over 12.9M
  - - - PENETRATION TESTER
        
        Penetration testers, or ‘white hat hackers’, are used to try to break into a system and exploit weaknesses in a company’s security. They would have the same set of skills as a ‘black hat hacker’ but are employed to help defend against people trying to exploit weaknesses. They would run various tests and then report back on what they have discovered, and outline the steps needed to protect the network and data. Penetration testers will also test the physical security of a company. They will try to gain unauthorised access to buildings and other secure locations of the company.
      - EDUCATION SPECIALIST
        
        Specialists in cyber security education would be employed to conduct training workshops. They would make sure that staff have good cyber hygiene and are aware of good practice when it comes to security. These sessions would be available to all staff, and would allow staff to ask questions about their company’s cyber security policies.
      - INFORMATION SYSTEM SECURITY OFFICER (ISSO)
        
        This role involves making sure that all private data belonging to the company, its employees and its customers remains confidential. The ISSO is also responsible for implementing, testing, and reviewing a company’s cyber security. The ISSO will monitor networks, install software and implement security measures, while informing users about the security measures they must take to avoid or limit an attack.
      - FORENSIC ANALYST
        
        A forensic analyst would have a computing science background, and have specialist skills and knowledge on how data is stored in digital devices. They can retrieve data that has been lost or damaged. They would also be able to use forensic tools to help them figure out how a data breach occurred.
      - OUTSOURCING
        
        Depending on how much money the company turns over, they may employ an external agency to look after the security of the network and cyber defences.
      - CHIEF INFORMATION SECURITY OFFICER (CISO)
        
        This person oversees security and has overall responsibility for ensuring that the security of the physical network and data is maintained. They will lead a team of experts and must oversee the development of security plans and policy designed to protect against a cyber attack.
      - SECURITY ANALYST
        
        The security analyst is responsible for analysing the current security measures in place, and determines how effective these are. They will create documentation to help the company deal with a data breach or a cyber attack, and will make recommendations on how to improve overall network security. They also have a responsibility to maintain data integrity within the company.
      - ONE-MAN TEAMS
        
        Due to the size of the company and the amount of money they turn over, they may only have one person responsible for everything. They would be responsible for network security and cyber training of staff.
      - NETWORK MANAGER
        
        Responsible for a team of network engineers who will maintain the computer networks, update software to latest versions, install antivirus and antimalware, and carry out the maintenance of hardware throughout the company. The network manager will give users access rights to different parts of the network, depending on their position within the company. Different users will have different access rights to the network. They also have a disaster recovery plan in case the network goes down, and they are responsible for having a backup strategy for data. Depending on how much money the company turns over, they may employ an external agency to look after the security of the network and cyber defences.
- - - - malware
      - weak/stolen passwords
      - malicous insider
      - backdoor/application v
    - - finacial loss
      - finacial reputation
      - damaged personal reputation
      - loss of emplyment
      - martial breakdown
      - stress/Illness
    - - fines
      - theft
      - finacial loss
      - reputational damage
    - - security management
        
        Integrate effective security management across a business or organisation.
      - Surveillance and reconnaissance
        
        Observe, capture and explore behaviours and identities of people and platforms on a computer network.
      - Analytics and big data
        
        Acquire, store, analyse and visualise very large and complex data sets.
      - Social media analysis
        
        Capture and analyse social media network activity, creating influence by looking at trends.
      - Digital forensics
        
        Extract identities, behaviours and data from secured data and devices for evidence of cybercrime.
      - Transition protection
        
        Provide end-to-end security for information transactions between networks and environments.
    - - A firewall is designed to block unwanted traffic. It can be either hardware or software.
      - benefits
        
        A firewall blocks malicious packets of data reaching the network. They use a variety of techniques to protect against attacks. Like proxy servers, firewalls mask the IP address and limit traffic types. External computers communicate with the proxy server instead. Firewalls also limit connections to trusted networks only. Packet filtering firewalls examine each packet, rejecting those that fail security testing.
      - risks of firewalls
        
        Packet filtering by using a software firewall can degrade your system's performance, because it is a demanding task to examine every packet of data. One way around this is to use a hardware firewall.
        
        If a firewall has been configured incorrectly, it may actually block legitimate connections and websites. Firewalls are only part of a defence system. They are not designed to stop viruses, for example. They must be used with other technologies, such as antivirus and malware software.
      - suppliers
        
        Zone Alarm, Windows Firewall, Norton’s
    - - Security programs, such as anti-virus, anti-malware and anti-spyware, are software that you knowingly install on your computer with the purpose of protecting your system from malware infiltration and infection. Security programs are able to do this in three ways: they detect malware on your computer; safely remove it; and clean up any of the damage to the computer that the malware may have caused. In addition, some premium programs have malicious website blocking and real-time protection.
      - Signature-based detection
        
        Uses key aspects of an examined file to create a static fingerprint of known malware. The signature could represent a series of bytes in the file. It could also be a cryptographic hash of the file or its sections. This method of detecting types of malware has been an essential aspect of antivirus tools since their inception.
      - checksum
        
        Checksums are used to ensure the integrity of a file after it has been transmitted from one storage device to another. A calculation is carried out on a file, and the next time that it is run with another checksum, another calculation takes place. If the checksum answer is the same as it was previously, then the file has not been modified, and can be considered safe.
      - Heuristic detection
        
        Heuristics-based detection aims at generically detecting new malware by statically examining files for suspicious characteristics without an exact signature match. For instance, an anti-virus tool might look for the presence of rare instructions or junk code in the examined file.
      - Memory resident monitoring
        
        The anti-virus software is loaded into the memory and constantly monitors activity on the computer and checks programs for infections before they run. It checks all programs and files being loaded, copied or modified for signs of suspicious activity.