28 Aug Case Scenario 2: Street Smith Company
Scenario:
The employees at Street Smith Company recently completed training on current social-engineering techniques that can be followed up with phishing attacks. Overall, the employees feel confident they understand both social engineering and phishing and, as a result, understand how to avoid being scammed.
One employee, Bradley Jones, was recently overlooked for a promotion. Bradley has heard rumors the company might be laying off some workers…including him. While he has not been happy at Street Smith Company for years, he has enjoyed the salary and benefits. Not being promoted has only increased his resentment of the company. As a result, he has decided to take sensitive files with him to a new job he has found with a competing company. He justifies his actions by telling himself that even though Street Smith Company has not appreciated his efforts, his new job will.
Bradley begins by talking to his coworkers about a special project he is working on that requires access to specific files. Bradley tells his coworkers he will email them an attachment explaining the project and the specifics of what he needs. The attached file he sends is an .html file in disguise. Upon opening the attachment, his coworkers are directed to a website containing malicious code. The code triggers a pop-up notification, which tells the workers that they have been logged out of Microsoft 365 and will need to re-enter their login information. As a result, Bradley collects the credentials of his coworkers, allowing him to access the system to obtain the files he really wants to take with him when he leaves the Street Smith Company.
Street Smith Company did not realize what Bradley had done until two months after he was laid off. Now, the company executives would like your expertise to help them understand how this happened despite the training the employees completed in detecting and avoiding such scams. The company executives want to know what they can do to better protect the company in the future.
Instructions:
In a 4- to 6-page paper, (not including the title or references pages) answer the following questions in your role as a consultant to the Street Smith Company.
Explain what kind of threat Bradley was at Street Smith Company. What signs were present? How might this company monitor these sorts of insider threats in the future?
Discuss the role authentication options may play in reducing similar attacks at the company in the future. Provide specific examples to ensure clarity for the company executives. Provide an example of a policy the executives should consider in role authentication.
The executives ask you about password security. Explain how passwords did or did not significantly impact the attack. What else could have been done to protect the company, even though the firm had provided mandatory training just weeks before Bradley began his attack? Discuss current trends in password characteristics that the company should use for all employees.
The company executives are not familiar with the concept of access control. Explain that concept, so they can understand it. Discuss its role in cybersecurity and how the company can implement at least two tactics, such as limiting access to data and assigning least privileges to employees, to control access.
File access control relates to the secrecy dimension of security. What is the relationship between an access control matrix and the integrity of the objects to which access is being controlled
Discuss why Street Smith Company should develop cybersecurity policies. Give two reasons why policies are paramount in cybersecurity practices and that go beyond updating hardware and software. Consider the human element in security.
Requirements:
Back up your paper with sources. Refrain from relying on blogs as sources. To find credible sources, you might begin with the UMGC Library using OneSearch, Google Scholar, or web search (Google), government websites, and professional organizations.
Include a references page of the sources you used in your research.
Use APA 7 formatting throughout your paper.
Submission:
Review the Grading Rubric to understand how you will be assessed on this assignment.
Our website has a team of professional writers who can help you write any of your homework. They will write your papers from scratch. We also have a team of editors just to make sure all papers are of HIGH QUALITY & PLAGIARISM FREE. To make an Order you only need to click Ask A Question and we will direct you to our Order Page at WriteDemy. Then fill Our Order Form with all your assignment instructions. Select your deadline and pay for your paper. You will get it few hours before your set deadline.
Fill in all the assignment paper details that are required in the order form with the standard information being the page count, deadline, academic level and type of paper. It is advisable to have this information at hand so that you can quickly fill in the necessary information needed in the form for the essay writer to be immediately assigned to your writing project. Make payment for the custom essay order to enable us to assign a suitable writer to your order. Payments are made through Paypal on a secured billing page. Finally, sit back and relax.
About Wridemy
We are a professional paper writing website. If you have searched a question and bumped into our website just know you are in the right place to get help in your coursework. We offer HIGH QUALITY & PLAGIARISM FREE Papers.
How It Works
To make an Order you only need to click on “Order Now” and we will direct you to our Order Page. Fill Our Order Form with all your assignment instructions. Select your deadline and pay for your paper. You will get it few hours before your set deadline.
Are there Discounts?
All new clients are eligible for 20% off in their first Order. Our payment method is safe and secure.