Scenario

Assume that you have just been hired as the new Information Technology Manager of ABC Company. The organisation has been struggling with phishing and password attacks the past few months. They need your expertise to implement cyber security across all departments of 50 employees.

Review the cyber security awareness of all employees and the organisation as a whole and complete the following tasks.

1.Develop a set ofmitigation strategies as the basis of a policy and procedures document for ABC Company to promote cyber security awareness and practicesusing the headings provided below:

• Policies and procedures
• Control of data centre and accounts
• Application control
• Patch applications
• Configure MS Office macro settings
• User application hardening
• Restrict administrative privileges
• Patch operating systems
• Multi-factor authentication
• Regular backups

2.Develop a training program to promote cyber security awareness to be provided to your work team on the two cyber security matters mentioned in the case study above, beingphishing and password attacks.

In order toamplify the knowledge of staff and promote awareness your training should include the following content:

• current level of awareness in work area relating to cyber security
• organisation-wide cyber security best practice
• potential related impacts on workplace
• latest cyber security threats and trends impacting organisations