Antivirus/Anti-malware: Antivirus/Anti-malware software is designed to detect and remove malicious software from a device. This software scans the device and identifies any threats that may be present, and then quarantines or removes them.
Host firewall: A host firewall is software that is installed on a device to control incoming and outgoing network traffic. This helps to prevent unauthorized access to the device and protects against network-based attacks.
Changing default passwords: Many devices come with default usernames and passwords that are easily guessable and widely known. Changing the default passwords to strong, unique passwords is a simple way to improve the security of a device.
Enabling passwords: Enabling password protection for a device adds an extra layer of security. This ensures that only authorized users can access the device and its data.
Safe browsing practices: Safe browsing practices involve being careful about the websites visited and the links clicked. Avoiding suspicious websites and links helps to prevent malware infections and other security threats.
Patching/updates: Regularly installing software updates and patches is important to keep a device secure. These updates often include security fixes and vulnerability patches that protect against known threats.
Explain the following Device use best practices
Device use best practices are essential to ensure the security and proper functioning of devices. Some of these practices include:
Software sources: It is important to use trusted and legitimate sources for software installation. Downloading software from untrusted sources can lead to the installation of malware and other malicious programs. Users should validate the legitimacy of the sources before downloading and installing any software.
Validating legitimate sources: Users should validate the legitimacy of the sources by checking the digital signatures, version numbers, and reputation of the provider. Digital signatures ensure that the software is not tampered with and is genuine.
Researching legitimate sources: Users should research and investigate legitimate sources before downloading and installing any software. This will help them avoid downloading malicious software.
OEM websites vs. third-party websites: OEM (Original Equipment Manufacturer) websites are considered more reliable and secure than third-party websites. OEM websites provide software updates and patches that are tested for compatibility and security.
Removal of unwanted software: Users should remove any unwanted software that is not required for the device's operation. Unwanted software can consume system resources and cause slow performance.
Removal of unnecessary software: Users should remove any unnecessary software that is not being used. This can free up disk space and improve system performance.
Removal of malicious software: Users should remove any malicious software that is detected by antivirus or anti-malware programs. Malicious software can compromise the security of the device and steal sensitive information.
6.3 Summarize the following behavioral security concepts
Behavioral security concepts aim to define the expectations of privacy while using various technologies. Some of the expectations of privacy when using the Internet, social networking sites, email, file sharing, instant messaging, mobile applications, desktop software, business software, and corporate networks are:
The Internet: Users may expect their browsing activity to remain private, and they may expect not to be tracked without their consent. They may also expect their personal information to be protected.
Social networking sites: Users may expect their posts, messages, and personal information to be visible only to their chosen audience, and they may expect their data to be protected from unauthorized access.
Email: Users may expect their email communications to remain private and secure, and they may expect their email providers to take measures to prevent unauthorized access to their accounts.
File sharing: Users may expect their shared files to be accessible only to authorized parties, and they may expect the sharing platform to provide adequate security measures to protect their data.
Instant messaging: Users may expect their conversations to remain private and secure, and they may expect the platform to provide encryption to protect their messages from interception.
Mobile applications: Users may expect their personal information to be protected, and they may expect the app to provide adequate security measures to prevent unauthorized access to their device.
Desktop software: Users may expect their data to be protected from unauthorized access, and they may expect the software to provide security features such as password protection and encryption.
Business software: Users may expect the software to provide adequate security measures to protect sensitive business data and prevent unauthorized access.
Corporate network: Employees may expect the network to be secure and protected from unauthorized access, and they may expect their data to be encrypted when transmitted over the network.
Explain written policies and procedures and handling of confidential information
Written policies and procedures are documents that outline the rules and guidelines that individuals and organizations should follow to maintain security and ensure compliance. These policies and procedures help to establish a consistent approach to security, and they provide guidance for employees, contractors, and others who have access to sensitive information.
Handling of confidential information is a critical aspect of security. Confidential information includes passwords, personal information, customer information, and company confidential information. Organizations should establish policies and procedures for handling confidential information to ensure that it is protected from unauthorized access, disclosure, or loss.
Some key components of handling confidential information include:
Passwords: Passwords should be complex, unique, and changed regularly. Passwords should never be shared or written down.
Personal information: Personal information should be collected and stored securely. Access to personal information should be restricted to individuals who need it to perform their jobs.
Customer information: Customer information should be treated with the same level of care as personal information. It should be collected and stored securely, and access to it should be restricted to individuals who need it to perform their jobs.
Company confidential information: Company confidential information should be protected from unauthorized access, disclosure, or loss. This information may include trade secrets, financial information, or strategic plans. Access to company confidential information should be restricted to individuals who need it to perform their jobs.
Written policies and procedures can help to ensure that confidential information is handled in a consistent and secure manner. These documents should outline the steps that employees should take to protect confidential information, and they should provide guidance for responding to security incidents or breaches.
