In the first milestone, you identified a recent security incident that took place. There were multiple incidents that were chosen such as Target, OPM, Equifax, Home Depot, and so many more. 

In the second milestone, you will access the administrative, physical, and technical controls of the particular company then determine which one of these administrative, physical, and technical controls were not secure and led to the security incident. 

Guidelines for Submission: Your paper must have a title and reference page, be submitted as a two page Word document with double spacing, 12-point Times New Roman font, one-inch margins, and at least three sources cited in APA format.  As a reminder, every assignment goes through a plagiarism checker so follow all the guidelines that we have discussed as you read your articles, books, etc. and summarize the author’s thoughts.

Running head: SECURITY PROTOCOLS

1

SECURITY PROTOCOLS 3

Security Protocols

Student name

Course

Date

A security incident is an event that may indicate that an organization’s system or data have been compromised or that measures put in place to protect them have failed. Data breaches have increased in number year by year, with the reason being an internal or external source. Capital One, a bank holding company, experienced a data breach on its servers that exposed the personal information of nearly 106 million of the bank customers and applicants (Colby, 2019). This breach, according to the management, saw the hacker, a former employee of the Amazon Web services that hosted the Capital One Database that was leaked, gaining access to personal information related to credit card applications such as names, dates of birth, address and other related account numbers.

With the rise in security incidents, it essential to come up with protocols to reduce the risks involved. This includes; identifying the weakest areas of the organization-being aware of the issues or points prone to attack will enable the organization to make counter plans. Educating employees on the subject of network security to ensure they can identify threats and avoid them as well. Employing biometrics-use of electronics, for example, the biometric fingerprints will ensure that only the authorized person gets access to an organization or its data, unlike the pin codes or key cards. Enforcing security practices- to ensure the security of data, they are needed for security practices such as regular updating of passwords, which are different from previous ones, changing key cards regularly. Multiple verifications-having more than one step verification, such as biometric verification in conjunction with passwords and critical cards, enhances the security of an organization’s data.

References

Colby, C. (2019). Capital One data breach: What you can do now following bank hack. Retrieved on January 20, 2020, from

https://www.cnet.com/how-to/capital-one-data-breach-what-you-can-do-now-following-bank-hack/

Cremers, C. J. (2008, July). The Scyther Tool: Verification, falsification, and analysis of security protocols. In International conference on computer-aided verification (pp. 414-418). Springer, Berlin, Heidelberg.