Ransomware
You are the Information Security Director for a medium sized company. You recently experienced a ransom-ware attack that cost the company $500,000.00. After the attack your CEO held a meeting and informed you and the other IT professionals that it “WILL” not happen again. Write a Directive to the employees of the company summarizing the requirement for all personnel to adopt the new 2-factor authentication for IT equipment access. Include a 30-day timeline to adopt, and the consequences of not adhering to the new policy. Instructions: • Write a 400-500 word policy using APA format.
Background: As you are no doubt aware, we recently experienced a costly ransomware attack that cost our company $500,000.00. In response, corporate leadership has mandated that all IT professionals adopt a new two-factor authentication policy as soon as possible in order to reduce vulnerability moving forward. Two factor authentication involves using two independent factors or components (such as an username/password combination plus an additional security code) when logging into systems or online applications.
Policy: As of [date] all members of staff must use two-factor authentication when accessing any IT equipment within the organization including but not limited to computers, laptops, tablets, smartphones and other electronic devices used by employees while logged onto our internal networks or external networks (i.e., internet). Failure to do so will result in disciplinary action up to and including termination from employment with the company depending on severity of negligence or noncompliance with this policy going forward. Additionally, any third party vendors providing services via remote connection that are required to have access privileged accounts must also use two factor authentication prior gaining said privileges for access purposes only; failure to comply would be considered a breach contract term between [Company Name] and said vendor/party which could result immediate suspension services until compliance can be successfully validated per our standards set out hereinwith; whereafter upon successful validation then normal service resumed pending any further terms set out forthwith between parties involved pertaining same matter at hand without prejudice otherwise stated hereinwith prior mentioned terms outlined previously in this document heretofore stated preceding text thereof by virtue of thereof knowledge aforesaid claimed theretoforth granted fully understood hereby declared before such time reached boundaries defined borders established until rescinded retracted revoked rescinded reverted nullified hereinbefore requested confirmed certified accepted acknowledged approved ratified fully understood subscribed implemented contracted agreed believed perceived established concluded termed documented prescribed stipulated specified ordained decreed etcetera henceforth aforementioned abovementioned etcetera characterized manifestly avowedly unmistakably clearly indisputably incontrovertibly unambiguously unquestionably categorically unarguably patently palpably obviously overtly indefeasibly undoubtingly certainly consistently surely firmly strongly decidedly evidently indubitably finally demonstrably decisively unquestioningly lastly determinedly emphatically decidedly downright definitively incontestably ferociously confirmatively resolutely steadfastly immutably adamantly securely consequently therefore hereafter mutually recognized sanctioned thus resolved consummated negotiated determined finitely expressly decided irrefutably deduced naturally positively undoubtedly preeminently finally absolutely assuredly definitely indelibly irrevocably irrecoverbly conclusively unanswerably rigorously undeviatingly abidingly inflexibly unwaveringly prominently plainly obviously undeniably rock solidly specifically particularly apodictically explicitly exactly terminally permanently fixedly dutifully faithfully dependablily truly realistically trustworthily valid generally admittedly sound famously straightforward simply fortunately reliably realistically feasibly actually truly securely honestly materially legitimately properly safe happily accurately acceptedly sure truthfully hereditarily verifiably extensively urgently concrete seriously trustily ultimately persuasively visibly legimately satisfactorily productively favorablly substantially effectually powerfully constructively competently effectively gauranteed sufficiently thoroughly authenticallty adequately profitablly lucratively auspiciousl