Lesson 2

• It
• Further Education (Key Stage 5)

Internal  Threats-Physical Threats

In this lesson, we will cover physical threats such as:

1. Theft of equipment or data
   
2. Malicious damage to equipment or data
   
3. Damage or destruction by fire, flood, terrorist action or other disaster
   

TYPES OF THREAT?

WHAT IS AN INTERNAL THREAT?

Which threats can you see?

WHAT IS AN EXTERNAL THREAT?

What is an internal threat?

1. A security risk from outside the organization
2. A security risk from within the organization
3. A natural disaster affecting the organization
4. A competitor’s attempt to steal data

Which of the following is an example of employee sabotage?

1. Accidentally deleting a file
2. Introducing malware into the system to cause disruption
3. Reporting a security breach
4. Following company security protocols

How can organizations reduce the risk of employee sabotage?

1. Ignore suspicious behaviour
2. Give everyone full access to all systems
3. Implement strict access controls and monitoring
4. Hire more employees

What type of theft involves unauthorized copying of sensitive company data?

1. Physical theft
2. Identity theft
3. Financial theft
4. Data theft

Which disaster is NOT man-made?

1. Fire
2. Terrorism
3. Flood
4. Vandalism

What is a primary way to mitigate the damage from a power loss?

1. Use uninterruptible power supplies (UPS)
2. Install surveillance cameras
3. Allow employees to bring their own devices
4. Encrypt all company data

What is the purpose of a disaster recovery plan (DRP)?

1. To prevent employees from taking vacations
2. To avoid physical theft
3. To increase profits for the organization
4. To ensure systems can be restored after an attack or disaster

Why is data theft by employees particularly dangerous?

1. Employees don’t have access to sensitive information
2. Employees can easily sell the data to competitors
3. It can be hard to detect because employees already have access
4. Employees can only steal physical equipment

What is one key component of an effective incident response plan?

1. Promoting employees who report security breaches
2. A protocol for isolating and addressing security threats
3. Allowing employees to ignore minor incidents
4. Shutting down all systems permanently

Which of the following is an example of physical theft in an organization?

1. Sabotaging a marketing campaign
2. Deleting customer data from the server
3. Stealing laptops or storage devices
4. Sharing company secrets on social media