[Day 1] 3. Threats, Audit Types, and Security Policies

Assignment: Identifying Threats in a Laptop

Natural Threats

1. Flood: Water entering lower floors and damaging the laptop.
2. Landslide: Physical damage to the laptop due to debris or displacement.
3. Heavy Rains: Even with a waterproof bag, rain may penetrate and damage the laptop.
4. Fire: Overheating or external fire incidents.
5. Hot Climate: High temperatures affecting internal components.

Technological Threats

1. Malware: Harmful software compromising data or system functionality.
2. Open Ports: Vulnerable entry points for attackers.
3. Power Failure: Sudden shutdowns causing data loss or hardware damage.
4. Hardware/Component Failure: Issues like hard disk crashes or motherboard failures.

Human-Based Threats

1. Theft: Physical loss of the laptop.
2. Accidental Damage: Dropping or spilling liquids on the device.
3. Getting Hacked: Cyber-attacks compromising data.
4. Virus: Infected files causing disruptions.
5. Forgotten Password: Locked access to the system.
6. Insecure Network Connection: Data intercepted over un-trusted networks.

---

What is Audit?

An audit is a systematic evaluation of systems, processes, or operations to ensure compliance with laws, regulations, and organisational policies.

Why is Auditing Done?

1. Ensure compliance with legal and regulatory requirements.
2. Manage risks effectively.
3. Verify appropriate use of allocated budgets.
4. Detect and prevent fraud.
5. Identify operational inefficiencies.

---

Types of Audits

1. Internal Security Audit

   • Performed by: Internal team or employees.
   • Advantages:
     • Cost-effective.
     • Faster due to familiarity with systems.
     • Can be performed frequently.
     • Requires fewer external resources.
     • Tools and processes can be customised.
   • Drawbacks:
     • Internal bias may lead to incomplete information.
     • Limited knowledge of new threats and technologies.
     • Workload may hinder focus on the audit.
     • Employees may feel underpaid for additional audit tasks.

2. External Security Audit

   • Performed by: Third-party auditors.
   • Advantages:
     • Expertise in the latest threats and technologies.
     • Detailed and unbiased approach.
     • Professionalism ensures thorough evaluations.
     • Builds client trust in audit findings.
   • Drawbacks:
     • Expensive.
     • Time-consuming.

---

Audits by Purpose

1. Vulnerability Assessment and Penetration Testing (VAPT):

   • Checks for vulnerabilities in systems or software.
   • Determines whether vulnerabilities can be exploited.
   • Typically performed annually.

2. Procedural Audits:

   • Evaluates the effectiveness of processes and procedures.

3. Compliance Audit:

   • Focuses on adherence to specific laws, regulations, or standards.

---

What is a Security Policy?

A security policy is a formal document that outlines an organisation's approach to safeguarding its information assets. It defines:

1. Security objectives.
2. Roles and responsibilities.
3. Guidelines for protecting resources.
4. Procedures for responding to incidents.

---

Separation of Duties

• Definition: Dividing responsibilities among individuals to prevent fraud and unauthorised access.
• Purpose:
  • Ensures no single individual has complete control over critical processes.
  • Reduces dependency on one person.
  • Enhances security by creating checks and balances.

---