Question

Computer and Network Security

Total word count must be 250 to 300 words in your posting.

Who ultimately has ultimate responsibility for the computer security policies and organization implements and why? Consider the data owner, system owner, executive management, CIO, CEO, and the company’s Board members? Which of the social engineering scams do you find the most interesting? Have any you ever been the victim of a social engineering scam?

Answer 1

I think we can’t blame particular single person or organization staff. Because it is responsibility of company its member ,the data owner as well as 3rd party which is not mention in question its government.

     Proof:- Generally we blindly accept the company’s privacy policies when we download some files from any websites or install any apps from store. We are not intrusted for reading those all rules which is too long, and if we are read it and not accepting their policies then we can’t able to download file or install that app. So user have no rights at that time they have too blindly or knowingly accept those policies .

       Company’s staff are allow to access the user’s data of their work area only so it may be not responsible for the data security. Data can be licked by the company’s Board members or by the system owner and in some case CEO of company’s because they have a right to seen all the company’s data.

   So these are possible person or group of person who is responsible for our data security. Because the data owner, staff and executive manager don’t have a right to access all data.

So its responsibilities of company’s Board members, system owner and 3rd and most responsible is GOVERNMENT.

Government and company’s Board members have responsibility for computer security policies and organization implements.

why?

Because these two have a right to make decision related the data stored in computer or the computer’s security policies and organization implementation . all company’s staff member including CEO ,CIO ,system owner all have to follow the rules made by company’s Board members. and company’s Board members have to make rules and have to implement it in organization according to government policies . so ultimately highest responsibility for computer security policies and organization implements is on government. If government make a rule then everyone have to follow it else government can take an action against those people or organization.

Which of the social engineering scams do you find the most interesting?

Phishing : - In this technique hacker send a fake email on behalf of trusted sites or organization(ex:- PayPal or government ) and ask for your critical information and then attack on you using those information.

Sometimes they send an Suspicious attachment with email and hack your computer information once you download.

Sometime it send a link for redirecting you to another sites which may be crated for stolen your user information, once you open those sites your computer will automatically sending your data into their servers.

Have any you ever been the victim of a social engineering scam?

   Ultimately we all been victim of a social engineering knowingly or unknowingly. We all got a phone calls from some bank’s or by some organization. This are the proof that some people or organization which you don’t know have your information. But how ?

Whenever you download or search something on internet you are monetarized by the organization and the device company’s which is used by you for digital searching.