JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD MCA V ETHICAL HACKING Previous Question Paper (December - 2019 - R17)

Hackers are driven by a variety of motivations, often categorized as follows:

• Financial Gain: The primary driver for cybercriminals seeking to steal credit card data, bank credentials, or hold data for ransom.
• Ideological/Political (Hacktivism): Individuals or groups attacking organizations to promote a political agenda, social cause, or protest.
• Espionage: State-sponsored or corporate actors aiming to steal intellectual property, trade secrets, or classified government information.
• Notoriety and Ego: Hackers seeking recognition within the underground community or testing their technical skills against complex security systems.
• Revenge: Disgruntled employees or individuals targeting specific entities due to perceived personal or professional grievances.

A security policy is essential as it serves as the formal document outlining how an organization protects its assets. It provides:

• Standardization: Ensures consistent security practices across the entire organization.
• Legal Compliance: Helps meet regulatory requirements and industry standards, reducing liability in the event of a breach.
• Risk Mitigation: Defines acceptable use, access controls, and incident response procedures to minimize vulnerabilities.
• Accountability: Clearly defines the roles, responsibilities, and expectations for employees regarding data protection and system usage.