Information Security

Running head: INFORMATION SECURITY
INFORMATION SECURITY
Name of the Student
Name of the University
Author Note

INFORMATION SECURITY 1
Introduction:
Associations of numerous kinds and sizes (counting open and private division,
business and non-benefit) gather, procedure, transmit and store data in numerous structures
including the electronic, physical as well as verbal (for example discussions and
introductions). The estimation of data goes past the composed numbers, words, and pictures:
learning, ideas, thoughts as well as brands are instances of immaterial types of data. In an
world that is interconnected, data and related procedures, frameworks, systems and faculty
engaged with their task, taking care of and assurance are resources that, as other significant
business resources, are important to an association's matter of fact and thus merit or require
insurance against different perils (Baggett and Simpkins, 2018). Resources are liable to both
intentional and incidental dangers while the procedures, frameworks, systems and individuals
that are related, are having innate vulnerabilities. The changes related to the business
procedures and frameworks or other outer changes, (for example, new laws or guidelines)
may make new data security dangers. Along these lines, given the huge number of manners
by which dangers could exploit vulnerabilities to hurt the association, data security dangers
are constantly present. Compelling data security diminishes these dangers by ensuring the
association against dangers and vulnerabilities, and after that lessens effects to its advantages.
The Data security is accomplished via actualizing an arrangement of controls, including
forms, strategies, methods, hierarchical structures as well as programming and capacities that
are equipment. These controls should be actualized, checked, built up, surveyed and
improved, where vital, for guarantee that the security as well as the goals of the business of
the association have been met (Yaokumah and Dawson, 2019). An ISMS, for example, that
predefined in ISO/IEC 27001 takes an all-encompassing, facilitated perspective on the
association's data security chances so as to execute a complete suite of data security controls
under the structure that is general of a rational administration framework. Numerous data

INFORMATION SECURITY 2
frameworks have not been intended to be secure in the feeling of ISO/IEC 27001 and this
standard. The security that can be accomplished through specialized methods is constrained
and ought to be bolstered by fitting administration and techniques. Distinguishing which
controls ought to be set up requires cautious arranging and tender loving care (Cunningham
and Ainsworth, 2018). An effective ISM requires support by all workers in the association. It
can likewise require interest from investors, providers or other outer gatherings. Master
guidance from outer gatherings can likewise be required.
Review:
When one loses mobile phone, laptop and wallet, the person faces severe security
threats. The incident where I lost my belonging that is my smart phone, laptop and wallet, the
situation created major security threats for me. I lost my belongings while I travelling to the
countryside and I cannot possibly have any idea who stole my belonging. My wallet had my
two credit cards from two different banks, identity proof, cash and company security card. I
kept my mobile phone and wallet in my laptop bag. My laptop bag was stolen, and with it
went away my smart phone and wallet. Later on returning home from my travel, I received a
call from my bank to let me know that the bank has noticed suspicious activities against my
accounts. Both the accounts showed suspicious activity and there has been further developing
activity in those accounts. My credit card rating has significantly dropped to credit warning
as the bank informed me that several personal loan application have been filed by my name. I
realized my identity was stolen as my digital identity card was there in the wallet. Another
objective that can be understood from the whole incident is that, the people who stole my
belongings are technically competent and have garnered all my sensitive information from
the same.

INFORMATION SECURITY 3
The perpetrator has used the digital identity card to foster and pull out every minute
personal detail. Details include, bank detail, biometric (DNA fingerprints), serial numbers,
linked accounts, work history, savings, loans taken, places travelled, mobile details. Digital
identity security breach forms two kinds of threats, identity theft and identity tampering
(Grassi, Garcia and Fenton 2017). The perpetrators use the identity that is digital of other
identity for impersonating him or her. This kind of threat is called phishing. Phishing is
malicious attempt to acquire information by masquerading as a trustworthy entity. It can be
said that the perpetrators were phishing on the details to use it injudiciously. The digital
identity card has all the information regarding an individual, from the nation security number
to their bank details. Getting hand on the digital identity card, the attackers easily drew out all
the information from the card. This could be understood as they used the information to file
personal loan applications from the bank. Without the personal details and bank details, the
attackers could have not filed for loans. The attackers can easily use the detail they harvested
from the digital identity card to get cash transferred from one account to the other (Grassi
2017). The attackers have all the details and resources to get easily by pass the authentication
stage. The authentication consists into the verification progress of the digitally converted
identity of the entity. Four of the classes of authentication are defined usually: what is known
by the entity, what she or he is what he or she possesses and what she or he does (McCormac
2018). For the authenticatication of the the entity for presenting a digital identity, one of the
subset of the claims composing the digital identity have to be belong to one or more of those
classes. The next activity recognized is tempering of identity. The bank noticed suspicious
activity as they found data was being modified in the accounts. The next probable threat
could be that the money and assets will be transferred to another account by all means.
Losing of the digital identity and data posses significant threats.