IS3110 Risk Management in Info Tech Security
Malware and Viruses: Probability = 8, Impact = 9
Malware is short for malicious software. It is used to disrupt normal computer operation, gather sensitive information, or gain access to private computer systems. Viruses are a type of malware. Other types include, ransom ware, worms, trojan horses, key loggers, spyware, adware, and rogue security software. Malware impacts productivity, increases support costs, and can result in the compromise or loss of data and reputation. It can originate from a range of sources, spread quickly, and require an extensive approach to ensure the risk it poses is effectively managed.
The most common approach to combating malware is firewalls and anti-virus software. Policies should also be put in place to make the Staff and Students aware of the potential threat and ways to keep it at bay. This approach requires the full co-operation of all college Staff, Faculty, and Students to make it work.
Spam: Probability = 3, Impact = 2
Spamming is the use of electronic messaging systems to send unsolicited bulk messages (spam), especially advertising, at random. While the most commonly used form of spam is e-mail spam, it has also been appearing in other forms of media such as: instant messaging, Web search engine, spam in blogs, wiki spam, online classified ads, mobile phone messaging spam, (phone) call spam, social networking spam, and file sharing spam. The name is believed to come from a Monty Python sketch in which Spam is included in almost every dish.
While spam is inevitable, the impact is negligible. The most spam does is to use an organization’s bandwidth and reduce productivity (as it will take Staff and Students more time to sort out the real messages from the spam). Because the Internet is public domain, there is not much that can be done to stop spam. To help minimize the impact of the spam spam-filters may be used on the mail servers to reduce the amount of spam that reaches the Staff and Students through the school’s email service.
Sources:
http://en.wikipedia.org/wiki/Malware http://www.hccfl.edu/oit/anti-virusanti-spam-policy.aspx http://www.webopedia.com/TERM/S/spam.html
http://en.wikipedia.org/wiki/Spam_(electronic)