Question

Problem: Stored data is one of a company’s most valuable assets. If that data were to be stolen, lost, or compromised so that it could not be accessed, the company could go out of business. Therefore, companies go to great lengths to protect their data.

1.) Working with classmates, research how the companies where you each work handle their backups. If you are unable to determine this information from the company where you work, contact another local company for information.

2.) Find out how each company protects its data against malware, unauthorized access, and even natural disasters, such as fire and floods. Prepare a brief report that describes the companies’ procedures. In your report, point out any areas where you find a company has not protected its data adequately.

Answer 1

The local company protects its data from malware, cyber attack, and unauthorized access and from natural disasters by implementing these tools, techniques and strategies. First it put a control to access computers. Certain employees are authorized to access stored information to prevent misuse of data. For this purpose, the company uses passwords, electronic keys, and biometrics scan. The company also uses application security by encrypting the data, and by using white box security system. The company also uses antivirus programs, and firewall system to protect data from hackers. Moreover, it also uses behavioral analytics to find out abnormal activities. Employees are instructed to not send confidential and sensitive information from outside network. For email security, strong password creation is encouraged and enforced by the company. Further, the company uses an intrusion prevention system to avoid malicious attacks. As far as keeping the data safe from natural calamities is concerned, the company stores data in two places and moves data to cloud environment.

The company needs to consider insider attack threats that it does not focus. For this purpose, digital trails collection must be obtained by the company to ensure that insider attack will not take place.