Confidential Organizational Information And Employee Respons

Confidential Organizational Information And Employee Responsibilityas

Confidential Organizational Information and Employee Responsibility As an employee, you are often required to sign confidentiality agreements when beginning work at a new company. You may also be required to sign a contract in which you waive the rights to any systems or products created while working for a company. When you log in to the company’s systems, you may see notices that remind you that the information on the system is proprietary and the legal policies related to the release or dissemination of that information. For this Assignment, conduct Internet research on a company that has experienced a breach of security of its customers’ information. Then, suppose you are working for a company and have access to confidential information as well as the company’s intellectual property.

Submit by Sunday 7-2-17 a 1,200-word paper addressing the following: Describe the security breach of customer’s information at the company you researched. Explain how the lessons learned may apply to other companies, both large and small. Put special emphasis on how such a security breach can affect small companies, such as a carwash. In your explanation, be sure to recommend preventive measures that can be taken to avoid such breaches. Justify your recommendations.

Explain the steps/measures you can take to fulfill your role and responsibilities to protect the confidential information of your company. How are these steps/measures unique to IT employees? Note : Refer to the Assignment Template in the Learning Resources.

Paper For Above instruction

The proliferation of digital technology has led to an increased frequency of security breaches across diverse industries, underscoring the critical importance of confidentiality and cybersecurity measures. One prominent example is the Equifax data breach of 2017, which compromised sensitive information of approximately 147 million consumers. This breach was primarily caused by an unpatched vulnerability in the Apache Struts framework exploited by hackers, resulting in severe repercussions for consumers and the company alike. Analyzing this breach reveals vital lessons for organizations of all sizes and highlights preventative strategies crucial to safeguarding confidential information.

The Equifax breach was a stark reminder of the importance of timely vulnerability management and robust cybersecurity protocols. Hackers exploited a known vulnerability in the Apache Struts web application framework, which had not been patched despite available updates. This lapse exemplifies how neglecting routine security updates and patch management can lead to catastrophic data breaches. Equifax's failure to promptly address known vulnerabilities allowed hackers to infiltrate their systems, steal personally identifiable information (PII), and cause extensive harm to consumers, including identity theft and financial loss.

One of the key lessons from the Equifax incident is the necessity of proactive cybersecurity practices. Regular vulnerability assessments, timely application of security patches, and continuous monitoring are fundamental in preventing similar breaches. Moreover, instituting a culture of security awareness among employees, especially those managing sensitive data and systems, enhances the organization’s overall defense strategy.

While large organizations like Equifax have substantial resources, small businesses are often perceived as less vulnerable targets; however, they remain equally susceptible to security breaches. For instance, a small carwash business typically handles customer payment data and personal information, which can be lucrative targets for cybercriminals due to less sophisticated security measures. A breach in such an environment can lead to financial loss, legal liabilities, and reputational damage. Due to limited resources, small companies might neglect comprehensive security measures, making them vulnerable to attack. Therefore, lessons from large-scale breaches are highly applicable across all scales of operation.

Effective preventative measures include implementing strong access controls, utilizing encryption for sensitive data, maintaining regular security audits, and educating employees about cybersecurity best practices. Encryption ensures that even if data is accessed illegally, it remains unintelligible to unauthorized individuals. Regular backups and incident response plans further mitigate risk by enabling swift recovery. Importantly, small businesses can leverage affordable security tools and cloud-based security services to enhance their defenses without incurring prohibitive costs.

On an individual level, employees, especially those in IT roles, bear a significant responsibility to uphold data security. To fulfill these responsibilities, employees should adhere to established security policies, such as using strong, unique passwords, avoiding sharing login credentials, and recognizing phishing attempts. IT personnel, in particular, play a crucial role in implementing and maintaining security infrastructure, performing vulnerability scans, applying patches, and monitoring network activity to detect anomalies. These measures are tailored to the technical expertise of IT staff, emphasizing the importance of specialized knowledge in cybersecurity.

In conclusion, the Equifax breach exemplifies how neglecting basic security practices can have far-reaching consequences. Organizations—large and small—must prioritize proactive security measures, foster a security-aware culture, and ensure all employees understand their role in protecting confidential information. Small businesses, despite resource constraints, can adopt effective strategies such as encryption and employee training to guard against cyber threats. Ultimately, safeguarding organizational data requires a collaborative effort encompassing robust technical controls and ongoing employee vigilance. Implementing these lessons can mitigate risks and foster a resilient security posture that protects both organizational assets and customer trust.

References

• Andrews, J. (2018). The Equifax Data Breach: Lessons Learned. Journal of Cybersecurity, 4(2), 45-60.
• Bada, A., Sasse, M. A., & Nurse, J. R. (2019). Cybersecurity awareness campaigns and their impact. IEEE Security & Privacy, 17(3), 19-27.
• Gordon, L. A., Martin, K., & Loeb, M. P. (2017). The economics of cyber security. Communications of the ACM, 54(4), 86-94.
• Kumar, R., & Kumar, S. (2020). Small Business Cybersecurity: Challenges and Strategies. Journal of Information Security, 11(1), 12-23.
• Let's Encrypt. (2021). Web Security Guidelines for Small Businesses. Retrieved from https://letsencrypt.org
• Massad, R., & Nguyen, T. (2019). Securing Data in Small and Medium Enterprises. Cybersecurity Journal, 10(2), 101-115.
• O'Neill, M. (2018). Analyzing the Impact of Data Breaches. Cyber Defense Review, 3(1), 20-35.
• Schneier, B. (2018). Data and Goliath: The Hidden Battles to Collect Your Data and Control Your World. W. W. Norton & Company.
• Subramanian, M., & Kannan, S. (2021). Enhancing Security in Small Business Operations. International Journal of Computer Science and Security, 15(4), 313-325.
• Verizon. (2022). Data Breach Investigations Report. Retrieved from https://enterprise.verizon.com/resources/reports/dbir/