Common threats is the insider threat
1. One of the most significant and common threats is the insider threat. What actions do you think is appropriate for security an organization regarding the insider threat?
2. Imagine you are the new CEO of a toy Research & Design Company. Your company was in the process of creating an electronic gaming toy and the final protocol plans have been developed. You are not sure what security protocols are in place. What is your approach for securing the data from an outside threat?
Technical Requirements
Your paper must be at a minimum of 2-3 pages per question for a total of 4-6 pages (the Title and Reference pages do not count towards the minimum limit).
Scholarly and credible references should be used. A good rule of thumb is at least 2 scholarly sources per page of content.
Type in Times New Roman, 12 point and double space.
Students will follow the current APA Style as the sole citation and reference style used in written work submitted as part of coursework.
Points will be deducted for the use of Wikipedia or encyclopedic type sources. It is highly advised to utilize books, peer-reviewed journals, articles, archived documents, etc.
All submissions will be graded using the assignment rubric.
Sample Solution
The insider threat is one of the most significant and common threats to organizational security. An insider threat refers to an individual or group who have authorized access to an organization’s resources but use it for malicious or criminal activities. Insider threats can have a devastating impact on organizations, leading to major financial losses, data breaches, reputational damage, legal liabilities and even physical harm (Shepard et al., 2019).
In order to mitigate the risks associated with insider threats organizations should take a number of proactive steps including ensuring that all employees receive adequate background checks prior to being hired as well as continuing such processes periodically during their tenure; this could include credit reports and verification of educational credentials. It is also important for organizations to ensure that each employee’s job description and responsibilities are clearly outlined in writing so that any deviations from expected behavior can be identified immediately. Additionally regular monitoring of employee activity must be conducted using both automated systems such as intrusion detection software as well as manual reviews performed by trained personnel (Bassett et al., 2018).
Organizations should also properly train their staff on security protocols such as password management practices, internet usage policies etc.; having formal policies in place related these topics can help prevent untoward behavior by limiting unnecessary access privileges which may lead individuals down more nefarious paths. Furthermore investing in technologies which rapidly detect unusual activity allows organizations gain insight into potential problems before they worsen; implementing systems which track user logs and suspicious activities helps safeguard against unexpected events while providing additional confidence when evaluating employee performance.
