1. What is the difference between a. and a. One-month notice period before employee termination. High Moderate Significant Unauthorized data access or exfiltration by the departing employee. When an employee is terminated, they are given a one-month notice period as required by law. During this time, the employee retains full access to company information and systems according to their role. This situation poses a significant risk to the company, as the employee could potentially misuse their access to sensitive data. While this is taking place there is a compensating control in place where monitoring is conducted on two dimensions via EDR (Endpoint Detection and Response), tracking bandwidth usage and monitoring email traffic for unusual activity. …show more content…
It is recommended that the company implement a procedure to regularly update the Wi-Fi password, particularly after employee turnover or other events that could compromise network security. Additionally, consider network segmentation to further restrict access to sensitive resources. Network Security & Security Components 5. Lack of software download restrictions. Significant Moderate Significant Increased risk of malware or unauthorized software installation. Non-developer employees, such as those in the sales department, have local admin rights on their computers, which enables them to download and install applications without restrictions. Although these computers are protected and monitored, the lack of control over software installations increases the risk of introducing malware or unauthorized software that could compromise the company's security. Unlike developers, who require the flexibility to download and test various tools, sales employees typically do not need such elevated privileges, making this a potential and unnecessary risk. It is recommended that local admin rights be