Question

Hello, I'm working on a threat matrix for the PCI Consulting assignment. I was wondering, what are some threat events that Technology (Certain technologies may become obsolete, Tech Systems may be faulty and lead to errors, etc) can cause to harm information security, what are some security controls and solutions for handling them, and how does it reduce risk?

Answer 1

Some examples of threat events that Technology can cause to harm Information Security:

• New gadgets and software are being released every day. In the race for launching the product ahead of its competitors, the security features are often overlooked, which causes a threat to Information Security
• Identity theft can cause unauthorized entry of a third party to any organization's systems and cause havoc. Control on credentials and access must be in place to avoid this.
• Security software must always be kept updated with latest releases, failing to do so may cause Information Security attacks on the organization
• Accessing confidential information and data on personal devices. There must be sufficient controls in place to avoid leakage of data from personal devices
• Existence of Botnet malware, which searches the internet for vulnerable devices, and tries to infect as many devices as possible. Network performance and activities should be monitored to detect any irregular network behavior