Information Security Management Case Study of Widgets and Gadgets

Project
Management
Case study of
of Widget and Gadgets

Content
• Introduction
• Phishing
• Vishing
• Physical access breaches
• Data breaches
• Conclusion
• References

Introduction
•Widgets and Gadgets (WaG) company is willing to appoint
an Information security manager for their company to manage
all their information asset professionally.
•The executives of the company failed to adopt all necessary
security approaches and considered security as a secondary
requirement.
•The CCTV installed in the company were also highlighted as
improper .
•The information security policy and social awareness
programs are developed for the company and elaborated here.

Phishing
Phishing is referred to as a process or method that is widely used for
cyber crime by the cyber criminals to gather personnel credentials
through the usage of deceptive websites and email. The technique of
phishing is elaborated below:
• A legitimate website cloning is done to create a false
• Then the login page changes in to credential stealing script
• Phishing kit is created
• Phishing kits uploaded and sent to the targets.
• Once the email or website will be clicked the users became
victim