IT Security for Companies
IT Security for Companies — Executive Behaviors
These questions focus on safe executive behaviour in everyday company IT security. Test your knowledge on risk reduction, secure workflows, and security culture.
Anleitung: Choose the best answer. When you click, the correct answer appears in the sentence.
Interaktiver Vokabel- & Verhaltenstest (25 Fragen zu Executive IT Security)
1. What is the best executive habit to reduce cyber risk quickly?
The best answer is: ______
Lead by example: follow the same security rules as everyone else.
b) Skip security steps because your time is valuable.
2. What is the safest approach to passwords at work?
The best answer is: ______
Use a password manager and unique passwords.
b) Use a password manager and unique passwords.
3. Which is the safest response to a suspicious invoice email at work?
The best answer is: ______
Verify using a known contact method before acting.
b) Verify using a known contact method before acting.
4. What is the best rule for approving payments or bank detail changes?
The best answer is: ______
Use a 2-person check and verify out-of-band.
b) Use a 2-person check and verify out-of-band.
5. Why should executives avoid bypassing MFA (2FA / Multi-Factor Authentication) prompts?
The best answer is: ______
Because MFA stops many account-takeover attacks.
b) Because it makes email faster.
6. What is the risk of using personal email for company files?
The best answer is: ______
It increases leakage risk and breaks control/auditing.
b) It increases leakage risk and breaks control/auditing.
7. What is a safe habit for executives when traveling?
The best answer is: ______
Use VPN and avoid sensitive work on unknown Wi-Fi.
b) Use VPN and avoid sensitive work on unknown Wi-Fi.
8. What is the best behavior around USB sticks in the office?
The best answer is: ______
Treat unknown USB sticks as unsafe; don’t plug them in.
b) Plug them in quickly to identify the owner.
9. Which is the best policy for company laptops and phones?
The best answer is: ______
Use encryption, screen lock, and remote wipe.
b) Use encryption, screen lock, and remote wipe.
10. What is the safest approach to admin privileges for employees?
The best answer is: ______
Use least privilege: only what’s needed, when needed.
b) Use least privilege: only what’s needed, when needed.
11. Why is it risky to allow password sharing between employees?
The best answer is: ______
Because you lose accountability and increase breach impact.
b) Because you lose accountability and increase breach impact.
12. What is the risk of delaying security updates company-wide?
The best answer is: ______
It leaves known vulnerabilities exploitable.
b) It leaves known vulnerabilities exploitable.
13. What is the best executive message about reporting mistakes?
The best answer is: ______
Encourage fast reporting without blame to reduce damage.
b) Punish every mistake to create fear.
14. What is a safe practice for executive assistants handling calendars and email?
The best answer is: ______
Use MFA and separate accounts with clear permissions.
b) Use MFA and separate accounts with clear permissions.
15. Which is the safest behavior for sharing sensitive documents internally?
The best answer is: ______
Use controlled access links with permissions and expiry.
b) Use controlled access links with permissions and expiry.
16. What is the safest approach to onboarding new employees?
The best answer is: ______
Provide role-based access and security basics training.
b) Provide role-based access and security basics training.
17. Why should executives avoid approving requests under pressure?
The best answer is: ______
Because urgency is a common social engineering tactic.
b) Because urgency is a common social engineering tactic.
18. What is the main risk of using shared meeting links publicly?
The best answer is: ______
It can enable unauthorized access and data leakage.
b) It reduces calendar invites.
19. What is a safe rule for executives about confidential information in chats?
The best answer is: ______
Avoid sensitive data in chat; use approved secure channels.
b) Avoid sensitive data in chat; use approved secure channels.
20. What is the best executive habit for security culture?
The best answer is: ______
Ask for simple metrics and follow up regularly.
b) Ask for simple metrics and follow up regularly.
21. Which is safest when employees work from home?
The best answer is: ______
Use managed devices, VPN, and secure Wi-Fi practices.
b) Allow work on any device with no rules.
22. What is the safest approach to employee offboarding?
The best answer is: ______
Remove access promptly and recover company devices.
b) Remove access promptly and recover company devices.
23. Why is it risky to allow unapproved software ("shadow IT")?
The best answer is: ______
Because it can create unknown vulnerabilities and data leaks.
b) Because it can create unknown vulnerabilities and data leaks.
24. What is the main risk of ignoring phishing simulations or training?
The best answer is: ______
Because staff remain vulnerable to common attacks.
b) Because it improves email speed.
25. What is a safe executive rule for “exceptions” to security?
The best answer is: ______
Keep exceptions rare, documented, time-limited, and approved.
b) Keep exceptions rare, documented, time-limited, and approved.
Zusammenfassung: IT Security & Executive Behaviors
Erfolgreiche Informationssicherheit im Unternehmen beginnt beim Management. Führungskräfte prägen durch ihr tägliches Verhalten die Sicherheitskultur (security culture) maßgeblich:
1. Vorbildfunktion & Richtlinien
Das Einhalten von Passwörtern über Password Manager, die Nutzung von Multi-Faktor-Authentifizierung (MFA) ohne Ausnahmen sowie das kritische Prüfen von Rechnungs- oder Zahlungsänderungen (out-of-band verification) schützen das Unternehmen vor gravierenden Cyber-Angriffen.
2. Reaktionssicherheit
Fehler im Alltag schnell und ohne Angst vor Bestrafung zu melden, minimiert den potenziellen Schaden von Sicherheitsvorfällen erheblich.