Overview
Q1. Write a one-page confidentiality agreement tailored for a small tech startup. Your agreement should include:
- The definition and scope of confidential information
- The obligations of the recipient in protecting this information
- Any exceptions to confidentiality obligations
- The duration of the agreement and handling of confidential materials after termination.
Q2. Why is using social media considered a type of background check, and what implications does this practice have for privacy and employment decisions?
Q3. The Saudi Electronic University (SEU) has recently established a new Data Centre at its Riyadh campus to host critical systems, including Blackboard, Student Information Records, and administrative services. During an internal security audit, several issues were identified: unauthorized access by cleaning staff to the server room, unlocked workstations in administrative offices after hours, power fluctuations caused by nearby construction, disposal of old laptops and hard drives without secure data wiping, and expired fire extinguishers with no automated suppression system.
Question:
Based on ISO 27002:2013 physical and environmental security controls, identify and analyze at least four major physical and environmental security risks observed in this scenario. Then, propose a layered security design for the SEU Data Center, addressing perimeter defense, physical entry control, and internal monitoring mechanisms. Next, describe the preventive and responsive measures SEU should implement to mitigate fire, power failure, and device theft risks. Finally, discuss how the failure to comply with these physical security controls could constitute a violation of SEU’s Acceptable Use Policy and the National Cybersecurity Authority (NCA) Essential Cybersecurity Controls (ECC) in Saudi Arabia.