Cyber Security Policies & Standards (CY-703 (B)) - Important Questions

Explain the organizational implications of web threats and social media risks. Describe the main types of threats, give real-world examples, and discuss technical and managerial controls, including policy measures, that organizations should implement to mitigate these risks.

Explain the CIA Triad and discuss specific controls and practices used to ensure Confidentiality, Integrity and Availability of organizational assets exposed via web applications and social media platforms.

Describe an incident response lifecycle tailored for web-based incidents and social media breaches. Explain phases, roles and responsibilities, evidence preservation considerations and coordination with legal and PR teams.

Discuss privacy risks and data leakage scenarios arising from employee and corporate use of social media and web services. Recommend technical and administrative controls, including data classification, DLP, and awareness training.

Explain how a corporate information security policy should align with a National Cyber Security Policy specifically with respect to web threats and social media risks. Identify key components that need alignment and explain why.

Analyze the legal and regulatory implications for organizations in dealing with web threats and social media incidents, including relevant provisions of the IT Act, 2000. What compliance and reporting obligations should organizations consider?

List best practices for secure use of social media by employees and outline a concise organizational social media policy template covering acceptable use, disclosure rules, incident reporting and enforcement.

Discuss emerging web threats such as supply-chain attacks and deepfakes that can impact an organization's reputation via social media. Propose strategic policy and technical responses to mitigate these emerging risks.