|
|
|
|
|
|
|
|
|
Clean desk policy
| Глоссарий терминов по социальной инженерии и информационной безопасности |
A policy which encourages employees to remove sensitive documents or materials from their workspace when they are not in use. a clean desk policy hopes to mitigate the risk of the insider threat. this includes not only existing employees, but also “invisible insiders”, such as contract cleaners or anyone who has access to employee workspaces. a common example of a clean desk policy breach is employees leaving sticky notes containing passwords at their workstation, and a much overlooked breach of a clean desk policy is sending private documents to a communal printer when a private one should be used instead.
|
|
Containing, английский
Workstation, английский
- Пк, терминал или любое другое устройство, принимающее и передающее данные под управлением пользователя
- Term used freely to mean a pc, node, terminal or high-end desktop processor (for cad/cam and similar intensive applications) - in short, a device that has data input and output and operated by a user.
- Computers that are generally targeted at technical users, interface over a network easily, often run unix, come standard with more compute power than pcs and are capable of fast graphics. distinctions between high-end personal computers and glossary/94 workstations are blurring. for high-end animation work such as 3-d logs, morphing or animated characters, workstations provide the compute power and graphics performance the animator needs. s are used for computer-generated imagery (often called cgi) because they take less time than pcs to render images.
- A microcomputer or terminal connected to a network.
- Рабочая станция
|
Clear text, английский
See plain text.
Ceo fraud, английский
A type of business email compromise in which the attacker purports to be the ceo, and uses a compromised or spoofed email address to make a payment request to an employee with the authority to issue payments. the receiving bank account is usually owned or connected to the attacker. this attack preys on the human inclination to follow a chain of command and usually involves the attacker adding some urgency to the request. victims of this scam include meath county council, who lost ?4.3 million when one of their finance team received a fraudulent payment request from an attacker who claimed to be the ceo. the risk posed by ceo fraud can be mitigated by training executive staff, their assistants and those working in finance functions to identify the tell-tale signs of such an attack and how to mitigate it.
|
|
|
|
|
|
|
