IT Security Risks and Proposed Solutions for an Organization

This presentation discusses the main IT security risks faced by an organization and proposes solutions to mitigate them. It also covers the Comodo Certificate Authority Fraud Hack and an IT security problem faced by a contractor maintaining clients' data. The presentation concludes with recommendations for preventing IT security risks, such as using encryption on WAP, hiding SSD, and changing passwords periodically.

Communications
Network Security
Name of the Student
Name of the University

 The Comodo Certificate Authority Fraud
Hack took place in April, 2011.
 An Iranian hacker, duped the digital
certificates of some popular web sites like
Google, Yahoo, Skype and Live.com (Grimes,
R. 2018).
 He rooted Comodo as the most trusted
certification authority.
Comodo Certificate Authority
Fraud Hack

 A contractor maintains clients’ data, who
receive payments from government. There
are various IT risks possible to the privacy
and security of this data (Von Solms and
Van Niekerk 2013).
 IT security problem occurs when the
confidentiality of the sensitive data or
information is threatened by any means.
IT Security Problem

The most significant IT security risks for this
organization are given below:
 Ransomware
 DDoS Attacks
 Spyware
 Eavesdropping
 Phishing (0
 Data Breaching
 Threat to Digital Certificates (Bajdor and
Grabara 2014).
Main IT Security Risks

The proposed solutions for the risks are given
below:
 Ransomware: Proper Backups
 DDoS Attacks: DDoS Mitigation Technique
 Spyware: Antispyware Technology
 Eavesdropping: Encryption (Demir and
Krajewski 2013).
 Phishing: Virtual Private Networks
 Data Breaching: Disk Encryption
 Digital Certificate Threats: Adding CA
Proposed Solutions to
Risks

The recommendations for preventing IT
security risks are as follows:
 Using Encryption on WAP
 Hiding SSD
 Changing Passwords Periodically
Recommendations

 Bajdor, P. and Grabara, I., 2014. The Role of Information
System Flows in Fulfilling Customers’ Individual
Orders. Journal of Studies in Social Sciences, 7(2).
 Demir, I. and Krajewski, W.F., 2013. Towards an integrated
flood information system: centralized data access, analysis,
and visualization. Environmental Modelling & Software, 50,
pp.77-84.
 Grimes, R. 2018. The real security issue behind the
Comodo hack. [online] CSO Online. Available at:
https://www.csoonline.com/article/2623707/hacking/the-rea
l-security-issue-behind-the-comodo-hack.html
[Accessed 18 Aug. 2018].
 Von Solms, R. and Van Niekerk, J., 2013. From information
security to cyber security. computers & security, 38, pp.97-
102.
References