Human Error
Malicious Employee
Disguised Criminal
Cyber Hygiene
100

This simple mistake happens when a user accidentally deletes or overwrites a file.

What is human error?

100

This insider threat comes from someone who intentionally causes harm to systems or data.

What is a malicious employee?

100

This person pretends to be legitimate to gain unauthorized access.

What is a disguised criminal?

100

Failing to follow basic security practices is known by this term.

What is poor cyber hygiene?

200

These pop-up prompts help prevent accidental actions like deleting important files.

What are conformation boxes?

200

This immediate action prevents further damage once a malicious insider is identified.

What is suspending user accounts?

200

This security control requires visitors to display proof of authorization while on site.

What is wearing a visitor badge?

200

This action protects systems when users step away from their computers.

What is locking unattended machines?

300

Adjusting these settings can prevent unauthorized access or accidental sharing of files.

What are file properties?

300

This action prevents a malicious insider from accessing systems remotely.

What is disabling network access?

300

This process confirms a visitor’s identity before granting access to a facility.

What is identity verification?

300

This bad habit can lead to password theft if discovered.

What is writing down passwords?

400

This prevention method reduces mistakes by teaching employees correct procedures and security awareness.

What is staff training?

400

This security concept limits the damage a malicious employee can cause by restricting access.

What is least privilege?

400

This type of attack often relies on deception rather than technology.

What is social engineering?

400

Using weak or reused passwords demonstrates this security problem.

What is poor password management?

500

This type of mistake occurs when a user accidentally sends sensitive information to the wrong person.

What is accidental data disclosure?

500

This process ensures access is removed promptly when an employee leaves or is terminated.

What is offboarding?

500

This policy tracks visitor entry, exit times, and purpose of visit.

What is a visitor log?

500

This tool helps users securely store and manage strong, unique passwords.

What is a password manager?

M
e
n
u