MIS Module 7

What are the MAIN business risks when security is breached?

1. Financial - downtime, ransom, legal fees, fines, recovery work

2. Reputational - bad press and lost customer trust, which is very hard to win back

3. Operational - systems go down, shipments stop, employees can’t work

What is the CIA Triad?

• Confidentiality - only authorized people can SEE it

• Integrity - data is ACCURATE and not secretly changed

• Availability - systems WORK when people need them

What is malware?

any software written to damage systems, steal information, or take control

What is a virus?

hides inside a real program. YOU have to open it to activate it

What part of CIA triad is a virus affecting?

Integrity

Availability

What is a worm?

spreads by itself across the network, no click needed

What part of the CIA triad is a worm affecting?

Integrity

Availability

What is a trojan horse?

pretends to be a useful app so you install it, then opens a back door

What part of the CIA triad is a trojan horse affecting?

Confidentiality

Integrity

What is spyware?

secretly watched you: keystrokes, screenshots, passwords

What part of the CIA triad is spyware affecting?

Confidentiality

What is ransomware?

Locks (encrypts) your files and demands payment to unlock them

What part of the CIA triad is ransomware affecting?

Confidentiality

Integrity

Availability

How does malware ge in?

email attachments, bad websites, fake downloads, USB sticks, and old software that was never updated

What is phishing?

a fake message from your bank, boss, IT, or a vendor

What are four habits that stop most attacks/hacks?

1. Verify another way - unusual request, call back on a number you already know

2. Slow down - urgency is a tactic, pause when someone is rushing you

3. Don’t trust surprise links

4. When in doubt, ask

What are the four core controls?

1. MFA (multi-factor login) - CONFIDENTIALITY

2. Encryption - CONFIDENTIALITY, INTEGRITY

3. Least privilege - CONFIDENTIALITY

4. Backups - AVAILABILITY

What is MFA (multi-factor login)?

a second proof after your password: phone call, fingerprint, or key

what is encryption?

scrambles data so only authorized people can read it, stored or in transit

What is least privilege?

everyone get only the access their job needs, nothing more

what are backups?

tested copies stored separately, so you can recover

What is risk management?

1. Accept - live with it: the risk is small, or protecting against it costs more than damage

2. Mitigate - reduce the change or the damage, most security spending goes here

3. Transfer - shift the cost to someone else

Does risk management prevent all breaches?

NO

Accept, mitigate, transfer does not prevent all breaches, it decides how to handle risk that will always exist

What is the difference between governance and policy?

Governance is the whole system

A policy is one piece of it

What is governance?

the structures, policies, and accountability that make security decisions consistent across the whole business

What are the three things a part of governance?

1. Policies

2. Training

3. Clear ownership

What are policies?

written rules: who can access what, what employees share (even with AI tools), how to report incidents

What is compliance?

the legal floor, external rules for certain kinds for data

compliance avoids legal fines

Does compliance means secure?

No compliance does not means secure…you can follow every law and still be breached

What are AI-powered attacks?

Perfect-grammar phishing and voice clones

What are data leaks through AI tools?

employees pasting company data into public chatbots

What are attacks on AI itself?

poisoned training data and tricky prompts

What are the types of compliance?

• GDPR

• CCPA

• HIPAA

• PCI-DSS

• SOX

What is GDPR?

EU residents’ data, wherever the company is

What is CCPA?

California residents’ rights over their data

What is HIPAA?

Healthcare data

What is PCI-DSS?

payment card data

What is SOX?

financial reporting of public crimes