Cyber security

Question 1

System circumvention

Answer 1

A determined intruder will always be able to circumvent system. No security is 100% safe.

Ensuring cyber security does not necessarily mean it is impossible to gain access – there is a limit to what is reasonable and cost-effective.

Question 2

ISO 27,001

Answer 2

Outlines cyber security requirements.

To achieve the status – compliance indicates a business achieves recognise acceptable cyber security standards which give customers and supplies more confidence in doing business

Question 3

SOC2

Answer 3

Provide guidance and security.

There is no certification level just to report from an audit

Question 4

Stakeholders and human behaviour

Answer 4

We cannot control the actions of stakeholders. They may take shortcuts. This weakens our cyber Security to a breach virus stakeholder.

Cyber security relies on humans being honest and reliable. Phishing and bribery can happen to anyone making this an inherent risk of a security breach.

Question 5

Cyber security of devices

Answer 5

Wireless devices are less secure than wired. They can be accessed from close proximity.

Devices should not accept USB sticks and file access should be through a secure VPN

Password length, contains unique characters, reset every 30 days.

Training refreshed every year.