Stuart works for a financial brokerage. his job involves handling sensitive client information such as financial details. stuart illegally transfers details of some clients from his office computer to his personal email id, to misuse later. with reference to this situation, stuart is guilty of

Data Exfiltration

Explanation:

Data exfiltration refers to illegally movement of data or moving data without being authorized to do so.

It can also be referred to as data theft or data extrusion this information can be illegally taken by a drive or printer and it poses a huge threat to the company. An authorized employee can be responsible for this kind of theft by taking inside information or data to the outside malicious systems.

This can result to cybercriminals and open attacks to the company.

Types of Data Exfiltration and How They Work

There are different ways that data exfiltration can be committed and people are getting even more better and better at doing it.

Common types of data exfiltration and how they work.

Outbound Email -- this is when a person can forward internal emails to the external sources , they can email things like databases, planning documents , images and other confidential information that exist in the outbound email. The information bis transferred to a third party.

Downloads to Insecure Devices -- a person uses authorised channels and legal devices to transfer information illegally to unsecured devices such as their own smartphone or computer.

By doing this a person has exposed the company information to data exfiltration that can be done by anyone from their devices.

Uploads to External Devices -- the same threat can also occur if unauthorized devices are connected to authorised devices to upload certain files.