Information Protection Awareness

More documents

Recommendations

Info

1- Social Engineering – Phishing Phishing is an e-mail intended to convince you to handover personal details or perform an action in order to have control over your account or install spyware or other malicious software on your PC or network. 2- Social Engineering – Pre-texting Social Engineering The purpose of social engineering is to secretly install spyware or other malicious software or trick you into handing over your passwords or other sensitive financial or personal information The attacker communicating over the phone or via e-mail would claim not to have time to go through normal channels because of an emergency or because he is afraid of getting in trouble. The attacker may also ask for help changing a password, claim to have forgotten the system password or claim to be a helpdesk or technical support agent who needs help getting an employee's user ID and password for a test or password reset. 3- Social Engineering – Baiting The attacker leaves a malware infected on CD-ROM, DVD, or USB flash drive in a location sure to be found (bathroom, elevator, sidewalk, parking lot), gives it a legitimate looking and curiosity-piquing label, and simply waits for the victim to use the device. 9
Proper responses • Never hand over information unless sure of whom it is going to. • Do not respond to suspicious e-mails • Do not click links or downloads in suspicious e-mails and do not forward to friends. • Do not connect suspicious USBs to The Center’s computer • Do not open found CDs or DVD on The Center’s computer • Report suspicious emails to anti-spam@aramco.com and the Center <strong>Information</strong> <strong>Protection</strong> Group PHISHING Username Password 10
Page 1 and 2: Information Protection Awareness
Page 3 and 4: Information Security Overview Safe
Page 5 and 6: Information Security Overview Infor
Page 7 and 8: Internet Use King Abdulaziz Center
Page 9: 1- Social Networking Regulations an
Page 13 and 14: Classification Categories Summary T
Page 15 and 16: Proper Use and Protection of IT Ass
Page 17: Saudi Aramco Information Security P

Information Protection Awareness

Create successful ePaper yourself

Delete template?

Save as template?