General DIT

4. Type of threat posed by someone within an organisation, for example, an employee unintentionally installing a virus
5. Process of testing a system for vulnerabilities that a hacker could exploit
7. Spying on governments and businesses to obtain secrets / trade secrets / intellectual property, including access and data theft by hackers
9. Testing the security of a system by attempting to break into it with the owner's permission - Ethical ________
10. After an attack, the company needs to ____ – telling stakeholders and authorities (e.g. the ICO) what happened

1. When a fee is paid to the copyright holder to obtain the right to use or distribute content
2. What is covered by an AUP – e.g. equipment and data owned by a company
3. A network of computers infected with malicious software, often responsible for carrying out DDoS attacks and sending spam
6. Start and end of a flow chart, represented in an oval shape
8. Term used to describe the moral principles that dictate human behaviour –e.g.this is considered when using/processing personal data