This document provides an overview and training on security topics for Aaron's Tax Prep employees. It discusses the company's services, how tasks are performed, and how client information is kept secure. The main security threats covered are social engineering, malware, and removable storage. For social engineering, employees are advised not to share passwords or trust strangers without verification. For malware, antivirus software and regular scans are recommended. Removable storage is risky for transferring viruses, so only approved USB drives should be used. Maintaining high network security and being cautious of who employees interact with helps keep the business secure.

1. Training Session

2. BRIEF OVERVIEW OF
COMPANY
 Aaron’s Tax Prep. Was founded in 2005.
 We strive to prepare taxes for our clients
(individuals, small business to large
corporations) with the upmost
importance.
 Quality not Quantity is our number one
goal.

3. Tasks That We Perform
 Individual Tax Prep (1040 EZ, 1040 etc.)
 Small business (Forms for all types)
 Large Corporations (Forms for all types)
 Tax litigations
 Corporate and partnership laws

4. How We Perform These
Task
 Highly educated, qualified and trained
individuals.
 The latest software that is constantly
updated

5. Maintaining High Security of
Clients Personal Information
 There are many types of malicious things that
can invade our system as well as our clients
trust. There are three main ones that I will talk
about:
 Social Engineering
 Malware
 Removable Storage

6. Social Engineering (S.E.)
A social engineer runs what used to be called a "con game." For example, a person using
social engineering to break into a computer network might try to gain the confidence of an
authorized user and get them to reveal information that compromises the network's security.
Social engineers often rely on the natural helpfulness of people as well as on their
weaknesses. They might, for example, call the authorized employee with some kind of
urgent problem that requires immediate network access. Appeal to vanity, appeal to
authority, appeal to greed, and old-fashioned eavesdropping are other typical social
engineering techniques. Social engineering is a term that describes a non-technical kind of
intrusion that relies heavily on human interaction and often involves tricking other people to
break normal security procedures.

7. Ways of Combating S.E.
 Don’t tell anyone your password
 Just because they seem nice doesn’t mean
that they are.
 Question everything (just because they seem
ok, ask for some proof)

8. Malware
 Malware is short for “malicious software,” as that is precisely what it is.
Malware defines an entire class of malicious software. Malware includes
computer
viruses, worms, Trojans, adware, spyware, crimeware, scareware, rootkits,
and other unwanted programs.

9. Ways of Combating
Malware
 One way is with a regularly used and
updated antimalware program.
 Keeping an updated antivirus and
running a regular scan.

10. Removable Storage Media
 Removable devices are an easy way to
transfer viruses or malware throughout a
network.

11. How to Keep Our Business
Safe
 Maintain high security while throughout
the network
 Do not use any unapproved USB drives
 Watch who you talk to.

12. REFERENECES
 Social engineering. (2001, March). Retrieved from
http://searchsecurity.techtarget.com/definition/social-engineering