IT Buzzwords
What does VPN stand for?
Virtual Private Network
Employees use passwords before accessing company systems.
Access Control
An employee shares their password with a coworker.
Unauthorized Access
One user account is shared by an entire team.
Shared Account
What does ITGC stand for?
IT General Controls
What does MFA stand for?
Multi-Factor Authentication
Users must enter a code from their phone after entering their password.
Multi-Factor Authentication
A terminated employee still has system access.
Unauthorized Access
Passwords are written on sticky notes attached to monitors.
Weak Password Security
What is usually the first line of defense against unauthorized system access?
Password
What does BCP stand for?
Business Continuity Plan
System changes require manager approval before implementation.
Change Management Control
System changes are implemented without testing.
System Errors / System Disruption
Access rights have not been reviewed for three years.
Excessive/Inappropriate Access
What document is commonly used to request system modifications?
Change Request Form
What does LAN stand for?
Local Area Network
Important company files are copied every day for recovery purposes.
Backup Control
No backups are performed for critical data.
Data Loss
Backups are performed but never tested.
Untested Backups
What is tested to ensure data can be recovered after a disruption?
Backup
What does SQL stand for?
Structured Query Language
Former employees can no longer log in to company systems.
Access Deprovisioning / User Access Removal
A suspicious email link is clicked by an employee.
Malware Infection / Cybersecurity Incident
A developer makes changes directly in production.
Lack of Change Control
What is the process of periodically checking whether users still need their access?
Access Review