Why Do We Need to Study Information Security? In an era driv…
Why Do We Need to Study Information Security? In an era driven by data, information security is critical to protect personal, organizational, and national assets. With rising dependence on digital platforms, cyber threats are no longer a possibility—they’re a reality. A single breach can lead to financial loss, reputational damage, legal consequences, and loss of trust. Understanding the Do’s and Don’ts of information security equips individuals and organizations to mitigate risks and build a secure digital environment. Case Background: The Breach at XYZ Corporation XYZ Corporation, a mid-sized financial consultancy, suffered a phishing attack when an employee unknowingly clicked a malicious link in an email disguised as internal communication. This led to unauthorized access to the company’s database, resulting in loss of client data, temporary shutdown of operations, and significant monetary and reputational damage. What went wrong? The employee used a weak password reused across multiple platforms. The email system lacked robust spam filters. The company had no formal security training or awareness programs. Types of Cyber Attacks(Key Terms) Attack Type Description Phishing Deceptive emails or messages to trick users into revealing sensitive data. Malware Malicious software like viruses, ransomware, spyware causing damage or stealing data. DDoS Attacks Overloading a server with traffic to disrupt services. Man-in-the-Middle Eavesdropping on communication between two parties to steal or alter information. SQL Injection Injecting malicious SQL queries to access or manipulate databases. What type of cyber attack was experienced by XYZ Corporation?