NMIMS
Global Access
School for Continuing Education (NGA-SCE)
Course: IT Security and Risk Management
Internal Assignment Applicable for April 2022 Examination
1. The
financial company Capital One reported a massive leak of client information as
a
result of a database hack caused by a former employee of their cloud hosting
provider,
The data breach was executed by a former Amazon Web Services employee who used
a
misconfigured web application firewall to get access to Capital One’s sensitive
data. As
a result of the incident, the records of over 100 million people were
compromised. The
leaked data included applicant names, phone numbers, addresses, social security
numbers, and bank account numbers. What care should be taken when dealing with
third
party hosting of data? (10 Marks)
2.
Write a brief on Intrusion detection systems based on the following points:
a.
Difference between Network Intrusion Detection System and Host based IDS
b.
Difference between Firewall and IDS (10 Marks)
3. The
COVID19 crisis has adversely impacted almost all sectors globally, with
disrupted
supply chains, country-wide lockdowns and organizations exploring the
possibility of
long-term and even permanent remote working. The Business Process Outsourcing
(BPO) sector features contact center agents working from different locations
and
answering millions of calls every day. With the outbreak of COVID-19, China
became
the first country to ask these employees to work remotely, while others
followed suit to
contain the spread of the virus. The sustainability of these employees depends
on multiple
parameters, such as the ability to adapt to new working arrangements and the
willingness
to work across functions.
Some
key concerns faced by BPO organizations are data security and the impact on
productivity due to either inadequate infrastructure at employees’ homes or the
lack of
supervision. Some other issues include difficulties in recording calls when
working
remotely and the exposure of personal employee data to clients. Organizations
are taking
several measures to ensure that the productivity of contact center agents is
not adversely
affected by working remotely. Some of these measures include regular
touchpoints with
employees and periodic updates as well as daily team meetings to review the
status of
work being executed using tools such as WebEx, Zoom and Skype.
a.
Discuss the various IT risks associated with work from home and suggest
possible
remedies? (5 Marks)
b.
Would risk management principles be applicable in COVID19 like unforseen
pandemics? Justify your answer? (5 Marks)
No comments:
Post a Comment