Question

QUESTION 3 What internal procedure(s) would be most effective in preventing the recent Equifax hackers, in which personal & financial data of approximately 143 million people were copied, from selling and profiting from their hack, despite (and let's assume this is true) a world-class, robust firewall and the strongest known access controls? 3 poi For the toolbar, press ALT+F10 (PC) or ALT+FN-F10 (Mac). TT TT Paragraph Arial 3 (12pt) %DOQ T' T, Of Mashup पा • T I * HTML5 I

Answer 1

Internal control procedures to prevent hacking and other cyber crimes would be the following:

1) Having privileged passwords.

Passwords of enterprise IT resources are often stored in spreadsheets, text files, etc. These sources are insecure and do little to enhance data security.

Passwords and access to sensitive information should be 'role based' for example, only the top management will get to access sensitive personal data.

2) Internal vigilance

Employees are often the cause of selling companys data to earn quick money. Thus internal vigilance on their activites is important.

For instance, monitoring activities like user logons, failed logins, password access, password changes, attempts to delete records and other suspicious activities could help identify hacking attempts, policy violations and other incidents.

Common sources of digital compromises are legitimate but inactive user accounts. Eg. a staff member has been fired, but his or her account has not been terminated. The employee can still log in to access the organization's assets.

3) Multi-factor / Multi-step Authentication

The majority of breaches involve the use of intercepted authentication credentials at some point.

Companies must Use strong, multi-factor authentication methods by default wherever possible.

Combined with the ability to detect and alert on failed login attempts, this practice can provide clues to users that may be the focus of targeted attacks.