Homework Question 2:

You are an IT auditor in the internal audit department of a financial services firm headquartered in the United States. The cybersecurity team has recently seen an increase in incident reports that has management concerned. Management asks your team to review the cybersecurity incidents to identify any trends that may indicate internal control weaknesses in the IT department. While reviewing the cybersecurity incident data, you notice that some of the incidents have been miscategorized as cybersecurity.

Determine whether each of the following incident reports is a potential cybersecurity issue by labeling each Yes or No. Copy and paste each one into your initial response in bold type-indicate yes or no, and also explain why yes or why no, in detail:

A company website is down for two hours after a software update resulted in compatibility issues. A staff accountant opened an email attachment that contained the CryptoLocker virus. An employee lost an external hard drive while on a business trip. The hard drive contained corporate financial information. The data centers backup power failed to turn on during a power outage. Three servers cannot be backed up due to the backup size exceeding a systems storage capacity. Employees have stated that they are receiving an increased number of pop-up ads on company computers.