Assessing Security Culture

  Scenario Employees at SilverCorp are increasingly using their own personal devices for company work. Specifically, over half of all employees check their work email and communications via Slack on their personal mobile phones. Another 25% of employees are doing other work-related activities using work accounts and work-related applications on their personal phone. Allowing sensitive work information to be shared on employees’ personal devices has a number of security implications. You must research these security risks and use the security culture framework to develop a plan to mitigate the concerns. Instructions Compose the answers to the following four steps on Word Document. Step 1: Measure and Set Goals Answer the following questions: Using outside research, indicate the potential security risks of allowing employees to access work information on their personal devices. Identify at least three potential attacks that can be carried out. Based on the above scenario, what is the preferred employee behavior? For example, if employees were downloading suspicious email attachments, the preferred behavior would be that employees only download attachments from trusted sources. What methods would you use to measure how often employees are currently not behaving according to the preferred behavior? For example, conduct a survey to see how often people download email attachments from unknown senders. What is the goal that you would like the organization to reach regarding this behavior?