Skip to main content

Threats, controls and security measures

Short answer

Threats include malware, hacking, denial-of-service, phishing, insider attacks, physical hazards, and human error. Physical controls such as locked rooms, CCTV and UPS protect hardware; logical controls like authentication, firewalls, encryption, access control and regular backups protect data and software. Administrative measures like policies, training and audits mitigate risks.

What are different threats to Information System in terms of security? Discuss different controls and security measures (including physical and logical) that are to be applied to protect information systems.

Information system security means protecting the confidentiality, integrity and availability (CIA) of data, hardware, software and networks.

Threats

  1. Malware - viruses, worms, trojans, ransomware, spyware.
  2. Hacking / unauthorized access - password cracking, SQL injection, exploits.
  3. Denial of Service (DoS/DDoS) - flooding to make the service unavailable.
  4. Phishing and social engineering - tricking users to reveal credentials.
  5. Sniffing and spoofing - intercepting traffic, faking identity.
  6. Insider threats - careless or malicious employees.
  7. Physical threats - theft, fire, flood, power failure, earthquake.
  8. Software failure and human error - bugs, wrong configuration, accidental deletion.
  9. Data theft and fraud.

Physical controls

  • Locked server rooms, guards, CCTV and access cards/biometrics.
  • Fire detection and suppression, UPS and generators, air conditioning.
  • Protection from flood and earthquake; off-site backup storage.
  • Equipment tagging, cable locks, secure disposal of media.

Logical (technical) controls

  • Authentication - passwords, OTP, multi-factor, biometrics.
  • Access control - role-based permissions, least privilege.
  • Encryption - for stored data and data in transit (SSL/TLS, VPN).
  • Firewalls, IDS/IPS - filter and monitor network traffic.
  • Antivirus and patching - detect malware and fix vulnerabilities.
  • Audit logs - track user actions.
  • Backup and recovery - regular backups, tested disaster recovery plan.
  • Digital signatures for integrity and non-repudiation.

Administrative measures

  • Security policy, employee training and awareness.
  • Separation of duties, background checks, incident response plan.
  • Regular security audits, risk assessment and penetration testing.

✓ Answer checked by Claude Opus 5.5 (high effort)

Related questions

All Information System chapter 2 questions →