Security+ Module 27: Security Awareness

Security Awareness

Refers to the knowledge and understanding of potential threats

Insider Threat

Security risk that originates from individuals within an organization

Password Management

Practices and tools used to create, store, and manage passwords

Policies

Guidelines or rules providing framework for consistent decision-making and action

System of rules that guides decisions and actions to ensure compliance with organizational standards and legal ethics

Handbooks

Comprehensive guides that provide information on specific topics

Concise booklet offering detailed guidance on organization-specific procedures, guidelines, and best practices for individuals

Remote Work

Performing job functions outside of the traditional office environment

A work setup in which the employees work from locations outside a traditional office

Hybrid Work

Combination of remote work setup and in-office setup

Combination of traditional office settings with remote work options

Culture of Security

An organizational mindset that prioritizes security in tasks and processes

Password Manager

A specialized tool that is used with a web browser to remember all the different usernames and passwords for all the various sites

Social Engineering

A manipulative tactic used by attackers to trick individuals into bypassing an organization’s security procedures

Situational Awareness

Being mindful of surroundings, tasks, and the potential consequences of one’s actions

Shoulder Surfing

An attacker may peek over one’s shoulder to try to view any sensitive data on one’s screen

Eavesdropping

An attacker tries to listen to private conversations or meetings to breach security

Piggybacking/Tailgating

An unauthorized individual closely follows someone with legitimate access to slip into secure premises

Dumpster Diving

An attacker scours trash for discarded data to build a comprehensive profile of confidential information

Operational Security (OPSEC)

Stresses data protection against social engineers for business aspects such as routines, project details, and internal procedures

Organizational Change Management (OCM)

Recognizing the human role in security, ensuring staff engagement, and policy adherence