Problem
A. You've been asked to consult on a human resource (HR) issue regarding an employee who is suspected of misconduct. This employee violated the information security policy by trying to guess the passwords of other employees to gain access to their email. The HR department asks what should be considered when dismissing (firing) this employee? How might the issues change whether the employee's departure is friendly or unfriendly (hostile)?
B. You're developing a security program for the company you work at which has both full time employees and seasonal workers. How do security considerations for these two groups of employees differ?
C. While interviewing candidates for a new role in the IT department, the hiring manager wants to show off the new research and development lab where new technologies are being explored. This is a secure area that is generally only accessible to special employees. What would you tell the hiring manager about bringing the candidate into this secure area?
D. Explain the concept of separation of duties and how it benefits. an organizations InfoSec practices.
E. Your team is developing an InfoSec performance program for a new company. What factors would you consider are essential to the success of the program?