Neco 2025 Computer Studies Question 6

A small business operates a local area network (LAN) that includes a server storing employee personal data. The network configuration is as follows: - The router’s administrator account still uses the factory‑default password. - The Wi‑Fi network is open (no encryption). - Employees are allowed to share their login passwords for convenience. After a recent cyber‑attack, confidential employee information was stolen. Answer the following: (a) Identify three distinct security vulnerabilities present in the above scenario. (b) For each vulnerability, recommend a specific mitigation measure and briefly justify why it would be effective. (c) Discuss two ethical considerations the business must observe when responding to the breach, citing relevant professional or legal guidelines. (d) Outline the four main phases of an incident‑response plan that the business should adopt, highlighting the key actions in each phase.