Question: 1. SEC 401 Discussion Question (one page)

"System Upgrade" Select one of the following and discuss in no less than three paragraphs, and have at least one response to another student of at least one paragraph:

• Imagine a scenario where Jane, an administrative employee of a company, receives a call from James, the company's security administrator. He announces that he is calling everyone to inform them about this coming weekend's upgrade to the accounting system. James adds that he does not need anyone's password to the system, which Jane believes is a secure option. Instead, James will provide a batch file to complete the update. As an outsider looking into this scenario, explain the social engineering concerns that Jane should consider. Include the major signs that would indicate James's request is either a valid one or one that represents a potential attack on Jane's system.

• Suggest one strategy that a security department could use in order to raise awareness of social engineering concerns in an organization. Describe an original scenario similar to the one in the first portion of this question that brings to light a social engineering attack or concern and the manner in which the user(s) should react to such an attack.

• Any current topic or article related to penetration techniques.

2. COM 201 Discussion Question (half Page)

Improving Delivery and Visual Aids

Use what you've learned this week to respond to the following:

• Find and share an example of poor public communication. Discuss the delivery problem(s) and propose suggestions for improvement OR ways to avoid the problem(s) in future communications.

• What can you learn from these poor examples (both yours and those of classmates)?

• What does "death by PowerPoint" mean to you? What are some best practices for effectively using visual aids?