[SOLVED] cyber security-Discussion 3 replies each in 125 words

I need support with this Computer Science question so I can learn better.

Main que:Discuss the importance of user technology security education within organizations. What topics should be included in security education and training?

No need to provide replies to main question .Read below posts and reply accordingly.

ash-An employee plays a vital part in securing organizational data. This is must to know the importance of user technology security a cause for the controls is related to the overall security of the company’s data. Every employee must be aware of how the major impact is information security for the company’s growth and success. In the current situation, the securing organization’s confidential data has become a challenge because any intended or unintended activity in disclosing of company’s data lead to large financial loss and destructively marks the reputation of the organization (Stallings, W., Brown, L., Bauer, M. D., & Bhattacharjee, A. K. (2012)) .

The Security threat can be reduced by educating all the employees in Organizations that they should not take any action to sidestep or evade their company’s security systems by following the company’s privacy policies and procedures. For suppose, any employee encounters difficulties in understanding the privacy policies then he/she should report to their Manager .The following key actions must be included as apart of security education that an employee must follow: (Rittinghouse, J. W., & Ransome, J. F. (2017))

1. Physical security is very important to control, an employee should not try to ignore physical controls in any situation.
2. It is must that, all the employees should lock or completely shut down their desktops or

devices before they leave workspace or when not using.
3. Things subjected to private information should be locked when not in use and when information is no longer required then documents or files containing the info should properly be destroyed by shredding them off.

4. Setting strong password rules and guiding employees on how to set up their passwords.

sahi-User technology security education within organizations is vital since it assists companies to reduce security breaches which occur due to lack of employees’ security awareness. The sooner the employees get the training, the better for an organization. IT policies should also be taught to the staff as well as breaching methods. Protecting an organization means securing essential data, confidentiality, and the integrity of an organization. A recent program portrays the master plan of how and when to protect an organization (Patten, K. P., & Harris, M. A. (2013)).

The training program should comprise of vital topics which help in preventing breaches. The first topic is the usage of unique passwords policy where each person is responsible for the security of data. Secondly, there is configuring of the PC and encryption of data to ensure maximum safety and prevention of hackers and malwares. It is vital to teach the staff to limit file sharing and unnecessary printouts, which often gives way to hackers to penetrate an organization (Rittinghouse, J. W., & Ransome, J. F. (2017)).

Phishing is one of the biggest security aspect facing many organizations as well as individuals, and each person needs to be taught to avoid sharing of personal and confidential information with strangers as there is an increase in identity theft. Confidentiality is an important topic which should be taught to the staff as well as how to avoid lots of emails, especially at the workplace as hackers use the sites to prey on people. An awareness session can assist the employees to learn how to use advanced technology in the right way to ensuring security while at the same time, not affecting the operations of an organization.

Rav-The increases cases of threats and hacking events, security heading and organizing are critical for all customers. Along these lines, affiliations should have security mind as the essential need. While the affiliation together may have gifted administrators, it is basic to have masterminding winds set up since they may at the show be slight against cybercrimes. The weight has accordingly affected relationship to place more on cybersecurity course and orchestrating wanders. The undertakings help to furnish the customers with the right aptitudes and support of the new frameworks that would guarantee resources of the affiliation. Organizing updates the response or reaction of customers against computerized strikes. As it’s been expressed, security engineering impacts mind among the customers properly they to rouse aptitudes to respond to security issues over the affiliation together.

Building customers changing change and remediation methodologies will pull them to flabbergast potential issues and risks that would affect the system establishment of the affiliation. Thusly, the customers will be able to amaze savage activities all through the corporate resources. This deciphers when an affiliation together readies its experts, it makes a guaranteed region accordingly security breaks will be diminished. The building of best collusion prompts delegates, and along these lines, they will no vulnerability change according to astonishing security lead. Most importantly, status should be standard and solid with dynamic frameworks and structures (van Niekerk, J. F., & Thomson, K. L. (2010, September)).

Security supervises and getting ready join unmistakable subjects in thought with strategies and structures of the affiliation. The subjects should join particular hacking structures, social building, cybercrime design, impedance testing, programming vulnerabilities, astound word collusion, work zone security, data security, copyrights, and perilous undertakings, for instance, trouble, Trojans, and malware. Furthermore, it is principal to consider looking instances of ambushes and risks with a particular momentous focus to connect with customers to see better (Sedinic, I., Lovric, Z., & Perusic, T. (2014, May)).

pru-Importance of user technology security education within organizations:

Regularly train the employees on technology security is really a tough and critical challenge for the organization. One thing organization should make sure that employees should not make any expensive mistakes in information security. Hence, this technology security education helps the users to take the initiative and fight against the uncertainties and risks in the organizations. A good security awareness program always helps the users to identify the risks and vulnerabilities. The greater threat for every organizations usually occurs because human vulnerabilities which should be control by using this training programs (Steven & Maria, 2017).

Mot of the large tech organizations spent lots of money on security programs like cyber security, disaster recovery etc. so that employees get awareness about the programs and understand the criticalities of this programs. The main agenda of this training programs includes, employees should know the impacts of threats and vulnerabilities and how organizations face crucial problems because of this security issues. When we are discussing about the user technology security programs, people share different ideas and opinions but exactly this programs helps the organization is another crucial part. This programs helps the business to reduce the impacts of risks and vulnerabilities (Steven &Maria, 2017)

Topics which should be included in the security education and training are as follows (Cindy & Rick, 2008).

Physical Security: Physical security includes the employees are disclosing the badges or not while entering inside the office premises and how important it is to restrict the entry of unauthorized users. How this helps the business to control the crimes should also been included in the program.

Password Security: This is very crucial part and never use the default passwords, as soon as employees log in to the systems make sure to change the passwords immediately and use minimum 8 characters mixed of upper case and lower case.

Phishing: Phishing is a type of attacks which enter inside the systems or business networks with the human interactions by tapping the unwanted mails and messages. Hence, inside the training rooms employees should get trained on emails and messages and how to respond to the unidentical mails from outlook.

Social engineering: Social engineering is a term which is broadly used in the criminal and malicious activities and based on the human vulnerabilities. In this area, need to train the employees about the confidentiality of the information and ask them to not share any business sensitive data to the unauthorized person.

Malware: Malware is much similar to the phishing and criminals try to get the access by sending mails and messages to the employees so that they can manipulate the people and perform unethical activities. Hence, it is absolute necessary to train the employees on this types of attacks