Chapter 9, Problem 1LO

Program Plan Intro

The reason computer incidents are so prevalent.

Program Description Answer

Complexity, incorrect authentication, compromised login details, technological advancements, delay in getting fixes are some of the reasons responsible for computer incidents.

Explanation of Solution

Computer incident is any act which compromises the security of data of computer system or access to system.

Some of the most prominent reasons for computer incidents are discussed below:

• Increased complexity: Internet has increased complexity as it has allowed interconnection of various devices with new technologies emerging every other day. Websites, system applications, cloud computing, laptops, computer systems, mobile devices, and networks interconnected through the internet is becoming a mix of a complex environment. With increased complexity, there are more security breaches due to a number of entry points through which security can be compromised.
• Incorrect authentication: Customer care service is one area where security is most compromised as they are under constant high pressure from customers to solve their query at fast pace, which results in a security breach. In order to provide fast help service sometimes they forget to authenticate a person and give away confidential information. Sometimes login and passwords are shared among users of organization due to many reasons, for instance if someone forgets their password, he/she is provided with login credentials of another colleague, which results in unauthorized access to information.
• Technological advancement: Earlier all the data related to company’s operation used to be stored in a locked room with minimum access, but now a days with expanded business needs, globalization, collaborative working and new technological breakthrough this information is being shared on networks with millions of other computers. However, tools which are required for securing data are not getting developed by IT organizations at the pace of technological advancements, which can perform assessment of new risks that are added every day with newly added technology.
• Bringing your own device (BYOD) policy: Employee’s access company data by using their devices such as a mobile, tablet, personal laptops to have all time availability and connection with the work, which generates a security threat. Most of these devices may not have up to date security software and they can be used to access websites which may allow malware or virus to creep in organization network and compromises the security of other network devices.
• Delay in software updates: Commercial software when detects security threat, develop and issue fix or patch to resolve the problem. Most of the organization do not understand the upcoming risks and delay these software updates for multiple reasons such as time shortage, extra cost involved or just negligence, making the organization’s computer vulnerable to attack.