"Over the years, I have implemented a number of safeguard protection practices at my current company to prevent phishing attacks, malware, and ransomware. Some of the practices include training our employees on how to spot suspicious emails that could be phishing emails or potential malware that could infect their devices. As an extra security measure, I require all our employees to change their passwords every month. I send an automated message on a monthly basis to remind everyone to change their passwords."

"I have found that many companies have poor security detection processes in place. Companies don't properly train their employees on what to look out for and how to report these potential attacks to the Information Security department. I take IT security seriously and have implemented an awareness program to address this concern. Here are a number of things that I train our employees to look out for:

1.) Look at hyperlinks by hovering over them before you click on them.
2.) Never give out personal information from an unsolicited email.
3.) Do not click on any attachments or hyperlinks from an unknown source.
4.) Read through the email and look for misspelled words and poor grammar. That's a dead giveaway."

As organizations grow, their intellectual property and proprietary information become more vulnerable to attacks. Even though new methodologies are constantly being developed to thwart these, hackers continue to develop new in unique ways to obtain the information they seek. Interviewers will ask you about your practices to protect an organization's critical information and stay abreast of new and developing threats. This is the key reason they are interviewing you for this position.