Protection measures

Question 1

Describe why staff are important when it comes to protecting data?

Answer 1

• Staff are confident in their role and know their responsibilities of information security
• clearly assigned roles to specific people to ensure what their jobs are and that they are responsible if data is lost.
• staff must be trained so that they know how to handle information including basic data security techniques and how to protect data from unauthorized access and loss

Question 2

Explain the step an organization should take as part of a disaster discovery plan.

Answer 2

Before: possible risks must be analyzed to spot any weaknesses in preparation
Preventative measures should be taken after analysis
Staff training must take place to inform employees what should happen in an event of a disaster
During: staff response ensures data is protected and appropriate measures are put in place
Contingency plans implemented such as uploading recent data to cloud storage or securing backups and using appropriate equipment’s
After: recovery measures such as backups should be followed
Replacement hardware purchased for equipment that have been corrupted or destroyed
Disaster recovery polices should be updated or improved

Question 3

Why is it important to conduct information security risk assessments ?

Answer 3

to ensure physical and logical measures are up to date and that they can provide most effective methods of protection
By testing security measures, they can identify any weak points and fix those highlighted to minimize the possibility of external and internal data intrusion.

Question 4

Describe two cost impacts in keeping customer data secure?

Answer 4

Software- securing software such as firewalls maybe purchased to protect networked systems
Hardware- buying secure storage devices and new computer systems
Training- hiring industry experts to train staff on how to keep data secure
Security- hiring staff to protect server rooms