BTEC NAT Unit 15 - Organisational Systems Security ORGANISATIONAL SYSTEMS SECURITY Unit 15 Lecture 3 OTHER DAMAGING THREATS

BTEC NAT Unit 15 - Organisational Systems Security Learning Objectives OTHER THREATS (causing Damage or Destruction of Systems or Information) Natural Disasters Natural Disasters Malicious Damage (internal or external) Malicious Damage (internal or external) Technical Failures Technical Failures Human Errors Human Errors Theft Theft

BTEC NAT Unit 15 - Organisational Systems Security Natural Disasters Natural Disasters Range from simple power cuts to floods or fire Range from simple power cuts to floods or fire Require organisational measures to cope with extreme issues Require organisational measures to cope with extreme issues Affects depend on how critical the system is – air traffic Affects depend on how critical the system is – air traffic Employ necessary technology to provide resilience Employ necessary technology to provide resilience

BTEC NAT Unit 15 - Organisational Systems Security Natural Disasters Natural Disasters DISASTER RECOVERY POLICY Remote storage of data acquired in daily backups Remote storage of data acquired in daily backups Remote Mirroring of critical servers Remote Mirroring of critical servers Alternative data centres to transfer control at times of serious emergency Alternative data centres to transfer control at times of serious emergency

BTEC NAT Unit 15 - Organisational Systems Security Malicious Damage Internal & External causes Internal & External causes Hackers or disgruntled employees Hackers or disgruntled employees Can be physical damage as well Can be physical damage as well Security techniques required to limit access Security techniques required to limit access

BTEC NAT Unit 15 - Organisational Systems Security Technical Failures Always a risk with complex systems Loss of servers, storage devices, internet connections Technical damage can cause commercial damage and also inhibit the security of systems

BTEC NAT Unit 15 - Organisational Systems Security Human Errors The most unpredictable and common causes of security issues in networks The most unpredictable and common causes of security issues in networks Forgetfulness, Ignorance, Innocence, Lack of knowledge Forgetfulness, Ignorance, Innocence, Lack of knowledge Backup data and place in a secure location Backup data and place in a secure location Erase hard drives before disposal of computers Erase hard drives before disposal of computers Close ports on firewalls Close ports on firewalls All can lead to network intrusion and viruses All can lead to network intrusion and viruses Increased attacks on broadband connections Increased attacks on broadband connections Social engineering and phishing attacks Social engineering and phishing attacks

BTEC NAT Unit 15 - Organisational Systems Security Theft Impacts caused by theft of data & technical property Hacking or data removal via CD or memory stick Non-shredding of discarded printouts Theft of computers, laptops & external hard drives Can cause long-term commercial damage, give advantage to competitors, loose customer good-will, financial ruin, loss of employment or legal actions

BTEC NAT Unit 15 - Organisational Systems Security Individual / Pairs Activity 3 CYBER DAMAGE Research ‘cyber damage’ by internet search Research ‘cyber damage’ by internet search Find out how many insurance companies now offer cover for this possibility Find out how many insurance companies now offer cover for this possibility