Class 6 - Human security¶
its been a bumpy time during this cyber security course, I havent been able to do any work properly, document homework and actually do any research, but the work and the bumpiness has much more to do with cyber security than I would have liked and having work like this has made me more considerate of Cyber Security.
I missed this class, havent looked at the video YET, but I am trying to finish this homework before next class (in 30 minutes.. :) ) maybe later, I will update this again
The questionsa re tough, decided to look at the video - slightly sped up.
1. What, in your own words, is ‘cyber resilience’ and how is it different than ‘protection’ or ’security’?¶
Being ready for an attack or incident, resiliency comes from everyone in the org knowing the risks that come with any digital system
a. What is one thing you can do to build cyber resilience? b. What might get in the way of building cyber resilience? c. Why is cyber resilience an effective response to human-centric vulnerabilities?
Making the users and people at the organization involved in the processes which are responsible for backup and security. This way
2. A cybersecurity culture is defined as the “values, attitudes and beliefs that drive cyber-resilient behaviors”. The culture is created by managerial mechanisms like governance mechanisms, reward systems, consequences, leadership, priorities, performance evaluation, and more.¶
a. What are 2-3 behaviors you would like to see the people do to help the organization be cyber secure? b. What are the values, attitudes and beliefs that would drive these behaviors? c. What are the mechanisms you can employ to create the values, attitudes and beliefs?
3. What do you consider the top 2 human-centric security concerns or vulnerabilities from the use of GenAI tools (ChatGPT, Claude, etc)?¶
1. Misinformation and using AI output as authoritative evidence, resulting in wrong decisions being taken or developing plans, timelines based on AI responses which are usually generated from faulty or incomplete data.
2. Being too over-worked from AI generated responses and gettign fatigued into accepting any and all answers.
a. For each concern, explain why this is a concern? Provide a short example to illustrate the risk you see. Be as specific as possible. b. What behavior(s) would minimize the risk of a negative impact for this concern? c. What is a mechanism you can use to drive the values, attitudes, and beliefs that would encourage the behavior(s) you seek?