You$$re the only IT person at a small tool and die machine shop, which uses a LAN and cloud$-$hosted platforms to run the business on$.$ Your boss is not worried about the business being the target of a cyberattack and doesn$$t want you to spend time preparing the company to respond to such an incident. What would you advise your boss to consider? $($Choose all that apply.$)$

Question $9$ Answer

a$.$

Since we don$$t handle consumer$-$level payment cards, and we don$$t have any proprietary information, we probably don$$t have to worry about being a target.

b$.$

We do share an extranet connection with key customers and suppliers, and an attack on our systems could lead to an attack on theirs; whether we$$d be liable for the damages or not, it could cost us our relationships with those companies.

c$.$

Our cloud systems hosting company provides most of our security, and as long as we keep our systems on the factory floor and the workstations our staff use properly updated, we should be okay.

d$.$

Since we$$ve not really done even a basic vulnerabilities assessment, we don$$t know what risks we could be facing. Let$$s do that much at least, and let that tell us what the next step should be$.$ Soon.