What is meant by an internal threat to an organisation's digital systems?
A risk to data that comes from inside the organisation
A member of staff turns off the firewall on a work computer so they can download a game. Why does this threaten the organisation's data?
The computer loses protection, so malware can access data
A member of staff emails a file of customer details to the wrong customer. Which internal threat is this?
Unintentional disclosure of data
An employee who is about to leave copies the customer database and sells it to a competitor. Which internal threat is this?
Intentional leaking of information
Why might an organisation stop staff from using USB flash drives to move work files?
They are small and easy to lose, so data could be stolen
A member of staff downloads files from an untrustworthy website onto a work computer. How could this threaten the organisation's data?
The files could contain malware that steals information
A member of staff never logs out of the customer database when they leave their desk. Why is this a threat to the organisation's data?
Another person could use their account to access or change data
A member of staff has edit permission for the whole customer database although their role only needs them to view it. Why does this increase the risk of data loss?
They could delete or change records by mistake
A member of staff is unhappy about being passed over for promotion. Why might this make them an internal threat?
They may leak company data on purpose for revenge
An organisation has not updated the security software on its computers for over a year. Why does this increase the risk to its data?
New malware will not be recognised by the software
A member of staff opens an attachment in an email that appears to come from the IT team. How could this threaten the organisation's data?
The attachment could install malware that collects data
A member of staff is about to use a website they have not seen before. Which feature suggests the website is untrustworthy?
The web address has random letters and numbers in it
A member of staff keeps the only copy of some project files on a USB flash drive. The drive stops working. Why is this a threat to the organisation's data?
Portable devices can fail, so the files could be lost
Which term describes a member of staff sharing confidential data with someone who is not authorised to see it, without meaning to?
Unintentional disclosure of data
What is meant by users overriding security controls?
Staff finding a way around the security measures that are in place
What is meant by the use of portable storage devices as an internal threat?
Staff connecting items such as USB sticks to work computers
What is the name for a colleague deliberately looking at the computer screen of a member of staff to read confidential information?
Shoulder surfing
What is meant by accidental deletion of data as an internal threat?
A member of staff removing files or records by mistake
What is meant by accidental damage as an internal threat to an organisation?
A member of staff dropping a device or spilling liquid on it
What is meant by poor password practice as an internal threat?
Staff using passwords that are weak or shared with others
We use cookies to enhance your experience. You can manage your preferences or learn more in our Cookie Policy.