IT Asset Security: Servers and Personnel File Threats
This paper provides descriptions of two critical organizational assets — computer servers and personnel files — and examines the primary cybersecurity threats each faces. It explains how servers function as centralized hubs for applications and file storage, and how personnel files contain sensitive employee data such as Social Security numbers, compensation records, and I-9 and W-4 forms. The paper then analyzes how malware and hacking pose serious risks to both asset types, drawing on real-world examples such as the Home Depot and Target breaches and the Office of Personnel Management hack, to illustrate the consequences of inadequate data protection.
- Introduction to Organizational Assets: Overview of two key assets examined
- Computer Server Overview: Function and role of computer servers
- Personnel Files Overview: Contents and formats of employee records
- Threats to Computer Servers: Malware and hacking risks to servers
- Threats to Personnel Files: Data theft risks targeting sensitive employee data
- Conclusion: Importance of protecting both asset types
✍️ How to write this paper — guide, tools & examples ▾
What makes this paper effective
- Parallel structure: each asset is first described and then analyzed for threats, giving the paper a clear and consistent organizational pattern that is easy to follow.
- Concrete examples — the Home Depot, Target, and OPM breaches — ground abstract cybersecurity risks in well-known real-world incidents, making the argument more persuasive.
- Appropriate scope: the paper stays tightly focused on two assets and two threat categories, avoiding scope creep while still covering key dimensions of each.
Key academic technique demonstrated
The paper demonstrates asset-threat mapping, a standard technique in information security risk analysis. By defining each asset's function and value before introducing the threats it faces, the writer establishes why protection matters before explaining what must be defended against — a logical sequencing that mirrors professional risk assessment frameworks.
Structure breakdown
The paper opens with brief descriptions of each asset (computer server, then personnel files), then mirrors that sequence in a threat analysis section. Each threat section covers the same two vectors — malware and hacking — applied to the relevant asset. The paper closes with cited references in APA format. This symmetrical two-part structure (describe, then threaten) is well-suited to short asset-description assignments.
Introduction to Organizational Assets
This paper examines two critical organizational assets — computer servers and personnel files — and analyzes the primary cybersecurity threats each faces, namely malware and hacking.
Computer Server Overview
A computer server is essentially a more powerful computer that serves as a centralized point for one or more functions used by one or more workstations, commonly referred to as clients. Servers can be used as launch points for applications, as storage locations for files, and more. For example, a Citrix server can be configured to allow users to access a "second desktop" web portal, enabling them to log in and run applications online even without the relevant program files installed on their local workstation (Citrix, 2015).
Personnel Files Overview
Personnel files are records relating to the employment history of an employee. Common examples include I-9 forms, W-4 forms, W-2 and W-3 forms, performance reviews, disciplinary records, job applications, and wage and compensation information. Key data points within these files include Social Security numbers, full legal name, home address, prior employment history, and date of hire. These files may exist in printed or paper form, entirely in digital format, or as a combination of both — for instance, paper forms that have been scanned into a computer system as PDFs (SHRM, 2015).
Threats to Computer Servers
The two main threats to computer servers are malware and hacking. Malware is dangerous because it can reach computer workstations and servers through a variety of vectors, including phishing emails, compromised websites, and malicious file downloads. Depending on the type of malware contracted, the consequences can include data theft, data destruction, or disruptive pranking and annoyance. In nearly all cases, there will be some loss of time or productivity, and potentially a loss of data as well. Hacking is similar in effect but involves a direct attack by a live person, an automated system, or a coordinated group of both working together (MIT, 2015).
Conclusion
Both computer servers and personnel files represent critical organizational assets that face serious and evolving cybersecurity threats. Malware and hacking pose significant risks to the integrity, confidentiality, and availability of these assets. Organizations must invest in robust security measures, regular backups, and employee awareness to safeguard both their infrastructure and their employees' sensitive personal information.
References
Citrix. (2015). Leader in mobility, virtualization, networking and cloud services. Citrix.com. Retrieved December 13, 2015, from http://citrix.com
MIT. (2015). Viruses, spyware, and malware. Information Systems & Technology. Retrieved December 13, 2015, from https://ist.mit.edu/security/malware
SHRM. (2015). Personnel records: What should, and should not, be included in the personnel file? Shrm.org. Retrieved December 13, 2015, from
Zengerle, P. (2015). Millions more Americans hit by government personnel data hack. Reuters. Retrieved December 13, 2015, from http://www.reuters.com/article/us-cybersecurity-usa-idUSKCN0PJ2M420150709
Always verify citation format against your institution’s current style guide requirements.