New answers tagged

0

I will answer from my job experience as an IT auditor. Identity theft more often occurs from social engineering that take advantage of human psychology rather than through technological means. Attack vectors can include among others: Phishing Spear phishing - target subgroup of employees Whaling - targets senior management and executives These type of ...


0

Like you said: since a lot of personal information such as our names, location, contact info and other personal details are available for skilled fraudsters to commit identity theft. This is a problem that is hard to avoid which is why the following steps can you help you try and stay safe from fraud: Limit what people can see about you on your ...


0

I have worked in the IT Audit / IT Security profession for a while now, and I will answer from my professional experience. Is it necessary to have these documents, policies, DRP, BCP's etc built from the scratch to tighten up security to carry the task at hand? The policies you specified in your list are a basic necessity to a well functioning IT ...


2

Would this attract hackers? Yes, of course, that's the point of it. Good hackers, bad hackers, grey / white / black / multicolor hat hackers. They will come and inspect your server's front-door. Should you be afraid of it? Normally, your security posture should not rely on the absence of any attacker, otherwise you indeed have a big problem to solve. When ...


3

The need of creation and capturing acknowledgement of the policies depend upon various factors like present or expected to be done in future compliance audit, logging etc. The policies that any organization should take into consideration will be as below acceptable use policy change management policy critical technology usage policy data retention ...


4

I want to begin my answer by saying I work in IT Audit / Security and this answer derives from my profession. I assume that it's a good idea to supply the users of a system (or employees) with policies and agreements regarding information security. This is not only a good idea but essential to protecting your workplace. The benefits for implementing a ...



Top 50 recent answers are included