5.2 Operational Issues Flashcards
Risks of not keeping data secure
can get stolen,
replicated,
deleted,
modified,
impact reputation—>lower sales—>lower profit
Goes against GDPR (General Data Protection Regulation)
Health and safety for employers
Legally responsible for the safety of the employees within the working are
Risks of not adhering Health and Safety Legislation
Negative Publicity, fines, legal fees.
ethical/Moral issues in terms of risking health and safety of employees through a careless attitude towards safety
Why is Disaster & Recovery Planning important
For:
Security issues
Server issues
Hacking issues
Examples of the different levels of risk
Small-Network crash, Corrupted hard drive, hack or virus
Medium- Major hack, fire, corruption of backup
Large- Earthquake, disaster
What are the Organisational issues & Policies
Policies that put out rules for how you should behave and guidelines for the best practice.
The police also state what employees can or cannot do when using the network/internet/emails etc.
Code of conduct states standard behaviour excepted in workplaces.
Examples of the Policies
Acceptable use of technology—>(Telephone, Internet, Email)
Security—>(Passwords, Different levels of network access, Virus protection)
Disaster recovery—>(guidelines in case of disaster, Data backup methods)
ETC.
What is Change Management
Managing change within IT environment (e.g. updating hardware, software, equipment)
Objectives of change management
Ensure the procedures are used, so the change will be handled efficiently and promptly, so the chance of incidents are minimised.
Why would a business need a change in management
New software/Update Cybersecurity threats Damage to equipment Problems with the current system Change in business practice Legislation (e.g.GDPR) Seeking improved efficiency and effectiveness Competition Business need (e.g. remote access)
Scale of Change
DRIVERS-things that drives/ forces you to change (e.g. legislation, competition)
NEEDS- when you have to because of the needs of the business (e.g. improving network, remote access for employees)
Change Management AD + DIS (3 Each)
Advantages:
- Allows it to be improved
- Lets people know about the change
- Gives time to train employees
Disadvantages:
- Time costs you money
- Everyone need to follow the policy for it to run smoothly
- Can cause more problems as competitors or setting problems
Change Management (Without a plan)
If you have no plan things can go wrong and people won’t know what they need to do.