Homework Responses Wk 5

Hello all- I hoe you enjoyed your “long weekend” and lets never forget why we have that extra time. 
When discussing business espionage, it is important to note what exactly you are talking about. I think that it has been covered pretty thoroughly at this point- we all know what we are discussing and why we are discussing it, so we don’t need to go in depth about the notion of espionage. It is important to know also that it is a serious issue, and it really is essential that everyone does what they can to ensure that what is preventable is prevented. Some notable examples of what can be done even at the lowest levels on employees are basic OPSEC concepts, control and identification of secret or SI documents ect and even basic employee recognition can be trained and will assist in increased awareness in all locations.
  Risks assessments are one of the basic foundational things that should and must be done by any security official or Chief security officer- in fact these should be done many time throughout the year- in fact I would advocate for a monthly assessment to be conducted  in addition to big quarterly and semi-annual inspections. It is vital to security that all hazards are identified and have a form of control in place in to lower the risk for each hazard, and to continuously address them as the situation changes.
None disclosure agreements are a great way to keep employees “in their lane” so to speak. With signing of those documents, it gives legal ramifications as an option if their are breeches in those agreements. This assist in dealing with not only corporate espionage, but also with insider threats. This covers the company and will ensure that any leaks are dealt with accordingly and that the company is protected from any financial hardships that will occur with theft of property ect.
Threat assessment is the first thing put into place in any place- risk assessment will concurrently conducted, with physical assessments of the outside and other facilities conducted. Their will be a cyber team in place to o the same for the networks, computers systems, and connections including internet and Bluetooth. Their will surveillance systems in place to monitier not only visitors and others but also the employees. Their will also be programs installed in the networks to monitor patters of life an history for browsers ect for the employees. OPSEC and insider training is mandatory and will be done quarterly and for all new employees.