Data protection and cyber security

Common Vulnerabilities and Exposures CVE-YYYY-NNNN providing a unique identifier for each flaw to help security professionals track, share information, and prioritize fixes across different security tools and databases, making systems more secure

Open Worldwide Application Security Project international, community-based org for the improvement of app security

Common Weakness Enumeration category system for hardware and software weaknesses and vulnerabilities

SMS phishing

voice phishing

anything with utility to an organization

they may be leased, sold, or purchased

to control the distribution and confidentiality of our information

Weaknesses in technology, physical safeguards, people, or processes that can be exploited by a threat to cause harm (reduce confidentiality, integrity, or availability). A vulnerability is a weakness that a threat can exploit.

a possible undesirable event It consists of two components, the probability of the undesirable event and the resulting impact or damage if that event occurs.

To protect information and IT services (confidentiality, integrity, availability) so that risk is reduced to an acceptable level and the organization can meet its objectives.

Risk is quantified by impact × likelihood, factoring in threats, vulnerabilities/exposure, and controls. impact and likelihood Impact (business consequence) if the event occurs (often based on asset criticality). Likelihood of occurrence, influenced by threat capability/frequency, vulnerability/exposure, and existing control effectiveness.

the activities around discovering, quantifying, treating, and reporting on risks

attack type of looking over the shoulder of a target to view sensitive information

• Cross-site scripting (XSS) • Denial of service (DoS) and distributed denial of service (DDoS) • Drive-by downloads • Malware (viruses, worms, Trojans, ransomware, spyware) • Man-in-the-middle attacks • Password cracking • Phishing (social engineering via email/messaging) • SQL injection

[ransomware, spyware, Trojan, virus, worm]

The malware is sent as an attachment to an e-mail or downloaded as a file. If a user clicks the file, the ransomware installs itself and begins to encrypt data. The user is then asked to pay a fee if they want to receive the key for decryption.

when a DoS attack is carried out by several participants simultaneously

Government-sponsored individuals or groups — often military or intelligence personnel — who conduct cyber operations (espionage, sabotage, influence campaigns) on behalf of their state. This includes both direct government units and state-sponsored proxies operating with official backing or protection.

below-detectable activity level aiming for a long-standing intrusion with long-term goals

attacks that have not yet been recognized by the general security or hacker communities or by the impacted software manufacturers

layers of controls rather than single points of protection

That past attacks have already been successful.

data protection they determine the value of the data and related IT assets, the risk appetite, and the amount of funds available to protect it