9/8/2013 SEC280 Case Study Week 1 Case Study: Ping Sweeps and Port Scans Ping sweeps and port scans are not an immediate threat to the company. While it may be used by an attacker to build a profile against the company, it can also be used by an administrator to gather information about the company. Although it is not an immediate threat, it should still be monitored for potential threats because it is a common way for hackers to attempt to break a network. In the following document, more will be discussed about what ping sweeps and port scans are and how they are used to gather information about a company’s network. What is a ping sweep and how does it work?
To be prepared for anything is hard to do but with research and good instincts a business could be and feel safe from manmade and natural disasters. Physical security can be used to fix any gaps or problems with security. They may bring in surveillance, fences, hiring someone for the front desk, security badges for employees, guards at entrances. Anything that could prevent unwanted visitors that would be the proper type of security for the business will be considered. Computer programs like firewalls and back up programs to prevent cyber crime.
It would be unethical to market our mobile app as something only a "higher quality" of people should use. Instead we should simply focus on marketing the positive technical and ease-of-use values that our app would bring to customers. As with any firm, ethical behavior should be self-evident and steps should always be taken to avoid anything unethical. This will help to ensure the longevity of the firm, as well as the happiness of the stockholders, employees, and consumers alike. 2.
This will provide more security and better efficiency. Peer to Peer networks are just not secure enough. It would only take one dishonest employee or one employee having a bad day to try to sabotage a coworker’s computer. Although peer to peer networks are a good starting point for small businesses, the security risk makes them a hazard. Each user is responsible for controlling their own data, resources, and login information.
It’s imperative that we not only protect against these types of activities on the network, but that we also conduct them ourselves. Ping sweeps are what they sound like. They’re a regular ping that almost anyone in the IT field uses as a basic troubleshooting step but, they are conducted across an entire range of addresses. Whereas a normal administrator would only ping one or two destinations, a malicious user may conduct a ping sweep to find every endpoint on a network that they are allowed a connection to. Most utilities that perform this operation can also perform a DNS lookup on all the IP addresses as well to produce the end points names.
Disaster Recovery Plan Name IT/244 Intro to IT Security Date Disaster Recovery Plan A disaster recovery plan is one of the necessary aspects for the business to be successful. A Disaster Recovery plan prepares the procedures, people, steps, places, and equipment for restoring computer systems necessary to restore damaged or destroyed computer systems, as well as the secondary infrastructure to retrieve business data after a disaster. 1 Risk Assessment 1 Critical business processes In order to remain in the competitive, these days companies would need to have their own IT system that would make the business processes a better experience. However, this makes people highly dependent on technology, also a need to have disaster recovery plans. It is most important for those that have operations that are offshore, incase the business decides to change their location.
1. Does the nature of ChoicePoint’s business make them more vulnerable to this sort of attack? Which aspects? Aspect of ChoicePoint’s business | Effects on vulnerability | Basic Purpose- ChoicePoint’s mission is to provide information that is reliable through a secured internet channel to fulfill the data needs of various firms for a variety of purposes. | * Using the internet as a primary source of information transferal immediately adds to the threat of cyberattacks, in addition to the ability to commit fraud due to the fact that ChoicePoint does not physically interact with the businesses it, at least to confirm the business’ credentials | Changes in clientele- ChoicePoint’s initial customer base was based in the automobile industry, and had recently expanded into a variety of different industries for data collection and sale | * Having only been accustomed to particular industries beforehand, ChoicePoint is ill-equipped to deal with numerous small businesses and the challenges they pose, including, but not limited to, their authenticity.
This research examines the different avenues employers take to “spy” that employees may not even know about. This examination of employee rights will show how far an employer can go without violating any laws. The thought of knowing emails being sent out, phone conversations taking place, keystroke monitoring, or even social media tracking can all be done at a reasonable level without invading employee privacy. So it is reasonable to say an employee should expect privacy in the workplace- why or why not? Is Employee Privacy a Reasonable Right to Have?
Why it is important to keep good records and what could happen if you don’t? Good record keeping is vital to every business for many different reasons. Records are known as “the memory” of a business therefore, without records this could leave a company oblivious. Having good and current records can benefit you in many ways. It reduces time and attempts on compiling information when preparing for reports and other business obligations and transactions.
The policy allowed for internet access is only for business related activities. But the management has the right to access to any one e-mail, and he has also installed new software to short cut the system. Now things are becoming very series, disciplinary actions has developed were including possible termination.