Comprehensive Training Curriculum on Cybersecurity Awareness Training PPT

What is this slide for: Elements of an Effective Disaster Recovery Plan

This slide covers: This slide lists important elements in an effective disaster recovery plan. These are: Disaster recovery team, identification of critical information, risk evaluation, backups, and testing & optimization.

Instructor’s Notes:

• Disaster Recovery Team: A designated team of experts should develop, implement, and manage the disaster recovery plan. The roles and duties of each team member should be specified. The team must be able to communicate with one another, staff members, vendors, and clients in case of a cyberattack
• Identification of Critical Information: A solid disaster recovery plan outlines the systems, applications, data, and other resources that are most important for maintaining company operations. The plan also documents measures that must be taken to recover data
• Risk Evaluation: Analyze any potential risks to your organization. Plan the steps and resources necessary to restore operations based on the type of incident
• Backups: Determine what needs a backup, who should perform backups, and how these should be implemented. Include a Recovery Point Objective (RPO) that specifies the frequency of backups along with a Recovery Time Objective (RTO) that states the maximum permissible downtime permitted after a security breach
• Testing & Optimization: The recovery team should regularly evaluate its strategy to address ever-evolving threats and business needs. In planning how to respond to a cyber-attack, it’s critical that organizations test and optimize their security and data protection strategies

What is this slide for: Steps to Remove an Active Ransomware Infection

This slide covers: This slide illustrates steps that active ransomware infection. Most ransomware attacks are detected only after data encryption is done; however, some steps must be taken immediately.

Instructor’s Notes:

• Quarantine the System: Some ransomware strains attempt to spread to other computers and associated drives. You can control its spread by blocking access to other potential recipients
• Leave the PC ON: A computer may become unstable if files are encrypted, and you can lose volatile memory when a computer is turned off can happen. Keep the computer running to increase the likelihood of recovery
• Create a Backup: For some ransomware versions, decrypting files is possible without paying the ransom. Create a backup of any encrypted files on a removable drive in case a solution is available in the future. Files are damaged during an unsuccessful decryption attempt
• Check for Decryptors: Check with the No More Ransom Project to check if a free decryptor is available. If so, run it on a copy of the encrypted data to see if it can restore the files
• Ask for Help: Computers sometimes keep backup copies of files stored on them. A digital forensics expert may be able to recover these copies if the malware has not deleted them
• Wipe and Restore: Restore the system from a clean backup or operating system installation. This ensures that the malware is completely deleted from the device

This slide covers: This slide highlights types of trojan horses. These are: Ransom trojan, backdoor trojan, downloader trojan, DDoS trojan, exploit trojan, rootkit trojan, SMS trojan, fake AV trojan, trojan game thief, and banking trojan.

Instructor’s Notes:

• Ransom Trojan: This Trojan malware demands ransom from users in exchange for the restoration of an infected device and its contents
• Backdoor Trojan: The threat actor sets up access points to the network using this malware
• Downloader Trojan: This type of trojan typically targets already compromised devices and installs a new version of malicious software on the device
• DDoS Trojan: These can be deployed to multiple devices to create a botnet, or a zombie network, which can then be used to execute a DDoS attack
• Exploit Trojan: As their name suggests, these Trojans identify and take advantage of vulnerabilities within software applications to gain access to the system
• Rootkit Trojan: Rootkits operate close to or within the operating system's kernel, which gives them the capability to initiate commands to the computer. This trojan provides unauthorized access to threat actors. It is challenging to detect as it can conceal its presence on the infected device
• SMS Trojan: This is a mobile device attack in which the Trojan malware can send and intercept text messages. It can also generate revenue by sending SMS messages to premium-rate numbers
• Fake AV Trojan: Disguised as antivirus software, this trojan is ransomware that demands users to pay to detect or remove threats. The issues that the program claims to have found are usually fake
• Trojan Game Thief: This trojan targets online gamers and attempts to access their gaming account login information
• Banking Trojan: This trojan targets financial accounts and is created to steal data related to bank accounts, credit or debit cards, or other online payment systems