1. SEC 401 Discussion Question (one page)

“System Upgrade” Select one of the following and discuss in no less than three paragraphs, and have at least one response to another student of at least one paragraph:

• Imagine a scenario where Jane, an      administrative employee of a company, receives a call from James, the      company’s security administrator. He announces that he is calling everyone      to inform them about this coming weekend’s upgrade to the accounting      system. James adds that he does not need anyone’s password to the system,      which Jane believes is a secure option. Instead, James will provide a      batch file to complete the update. As an outsider looking into this      scenario, explain the social engineering concerns that Jane should      consider. Include the major signs that would indicate James’s request is      either a valid one or one that represents a potential attack on Jane’s      system.
• Suggest one strategy that a security      department could use in order to raise awareness of social engineering      concerns in an organization. Describe an original scenario similar to the      one in the first portion of this question that brings to light a social      engineering attack or concern and the manner in which the user(s) should      react to such an attack.
• Any current topic or article related      to penetration techniques.

2. COM 201 Discussion Question (half Page)

Improving Delivery and Visual Aids

Use what you’ve learned this week to respond to the following:

· Find and share an example of poor public communication. Discuss the delivery problem(s) and propose suggestions for improvement OR ways to avoid the problem(s) in future communications.

· What can you learn from these poor examples (both yours and those of classmates)?

· What does “death by PowerPoint” mean to you? What are some best practices for effectively using visual aids?