End-User Security Awareness Training

A subject intentionally provides system or data access to a third party that is not authorized to access it.

A subject can mount and write to removable media.

The subject does not have a threatening motive. However, the subject under takes actions without due care and attention to the outcome, which causes an infringement.

A subject deceptively manipulates and/or persuades others in order to gain access to devices, systems or services that hold sensitive information, or to otherwise cause harm or undermine a target organization.

A subject uses organizational resources, such as internet access, email, or work devices, for personal activities both during and outside work hours, exceeding reasonable personal use. This leads to reduced productivity, increased security risks, and the potential mixing of personal and organizational data, ultimately affecting the organization’s efficiency and overall security.

A subject tansports physical documents outside of the control of the organization.

A subject can mount and write to a USB mass storage device.

A subject can mount and write to an SD card, either directly from the system, or through a USB connector.

A subject can mount and write to disc media including, CD-R, DVD and Blu-ray discs.

A subject can access personal webmail services in a browser.

A subject can access personal cloud storage in a browser.

A subject can access websites containing inappropriate content.

A subject can access external note-taking websites (Such as Evernote).

A subject can access external messenger web-applications with the ability to transmit data and/or files.

A third party deceptively manipulates and/or persuades a subject to divulge information, or gain access to devices or systems, or to otherwise cause harm or undermine a target organization.

A subject can access external text storage websites, such as Pastebin.