Question

An online retailer is looking to hire employees for its customer service department. These employees would be authorized to create/update/delete customer data which may include credit card information. They also have access to customers’ orders. Discuss an insider attack which can be launched by a customer service employee and describe the control measures which you would deploy to mitigate the associated risks.

Answer 1

The insider attacks such as the employees can mail the up mention details such as credit card information, customer orders to their personal mail id's. And it is possible for them to sell it in the outside market.

It is the major theft happening in almost all the companies.

The only way is to track the system activities of the employees and logs the data. It should be manged all the time by group of experts if any malfunctions detected can be caught instantly before it cause heavy loss to the company

Please rate it if the above solution helps you in any way or if you have any concerns comment it, I will help you through again.