Cbanc home

Description: Talking points slide for compliance with annual information security training requirements.

Description: Information Security Policy.

Description: I've created a social media risk assessment model. My model uses the concept of "Threat/Vulnerability" pairs to isolate weaknesses that can result in disaster. In a nutshell, here's the deal: there are threats and there are vulnerabilities. Threats are actions or events that can cause harm to the organization. For example, when it comes to social media risks, an example of a threat is the disclosure of confidential customer information over social media. Vulnerabilities are simply weaknesses in the system. They are the chinks in the armor. Vulnerabilities are what enable the threats to take form. For example, a vulnerability related to the threat above could be a lack of understanding of social media-related information security risks by employees. Therefore, using the same threat example above, a way for the threat to manifest or occur can be due to a lack of adequate employee training. In other words, an employee does not know that it is a bad idea to post confidential