Assignment Week 3
Module Questions 3
1. What is the difference between a virus, a worm, and ransomware?
Answer:
IT security and cyber security are closely related, but they are not exactly the same. IT security is broader and focuses on protecting all information technology systems in a company. This includes computers, servers, networks, software, and even physical devices like hard drives and office equipment. It covers both digital and physical protection of information systems. Cyber security, on the other hand, is more specific. It focuses mainly on protecting systems, networks, and data from attacks that come through the internet or digital connections, such as hacking, malware, and online fraud. In simple terms, IT security protects the whole technology environment, while cyber security focuses on protecting systems from online threats.
2. Describe the steps of a typical phishing attack. How can a business train its employees to spot one?
Answer:
A major data breach can seriously damage a company in several ways. First, it can harm the company’s reputation, because customers may lose trust if their personal or financial information is exposed. Once trust is lost, people may stop using the company’s products or services. Second, it can create major financial losses, including costs for fixing the problem, compensating affected customers, improving security systems, and losing revenue from reduced business activity. Third, it can cause legal problems, because companies are often required by law to protect customer data. If they fail, they may face lawsuits, government fines, or regulatory investigations. Altogether, a data breach can affect both how the public sees the company and how it operates financially and legally.
3. Explain what a Distributed Denial-of-Service (DDoS) attack is and how it impacts business availability?
Answer :
Company leaders such as CEOs and board members need to care about cyber security because cyber risks can directly affect the entire business, not just the IT department. Cyber attacks can stop operations, cause financial losses, damage reputation, and create legal consequences. Leadership is responsible for managing overall business risk, and cyber threats are now one of the most serious risks companies face. In addition, leaders make decisions about budget, policies, and long-term strategy, which all influence how well the company can prevent and respond to cyber incidents. Without strong leadership involvement, cyber security efforts may be weak, uncoordinated, or underfunded, making the organization more vulnerable to attacks.