Quiz: Reporting a data breach

1. Which of the following is considered a breach of data?

A

An employee still has access to data after termination

B

A hacker can access company data

C

An employee accessing customer data after-hours and using it personally

D

All of the above

2. What should you do if you know there has been a breach?

A

Report it and follow incidence response protocol

B

Inform selected customers only

3. When do you notify regarding a breach?

A

Wait until all verifications are made

B

Immediately after the breach occurred

4. What should you do immediately after a breach?

A

Inform management

B

Disconnect all systems

C

Check and verify the backup of data

D

All of the above

5. What can you do within your personal capacity as an employee to prevent a breach?

A

Do not reuse the same password for multiple accounts

B

Do not provide person information in response to an email or phone call

C

Avoid opening attachments until the sender is verified

D

All of the above

6. If you are informed that your data has been compromised or breached, what can you do to secure your personal information?

A

Change any exposed passwords with the help of a password manager

B

Remove any personal information from breached sites

C

Delete accounts you are no longer using

D

All of the above

7. People are often cited as the weakest link for organizations in a cyber attack; why is that so?

A

Employees do not go through security awareness training

B

The high likelihood of phishing attacks targeting employees to click on suspicious links

C

Companies often use a strong firewall

D

Employees are increasingly working remotely

8. Which of the following is something a hacker will not do after a data breach?

A

Wait for the right opportunity to exploit the data

B

Change your billing address so you do not realise the fraud until it’s too late

C

Leave a trace to expose the hacker’s identity

D

Sell your information to others on the dark web

9. Which of the following are common misperceptions of SMEs relating to a data breach?

A

My business is too small to be a target

B

The use of cloud storage is less secure than using my own hardware

C

Using a firewall is good enough to protect my business

D

All of the above

10. Why would hackers choose to attack SMEs?

A

The lack of adequate security controls

B

There is more valuable information to be stolen