a) Provide any 5 Audit procedures related to Password

IT Security Audit - provides invaluable information about your security controls.

Risk Management Audit - help us stay ahead of insider threats, security breaches, and other cyberattacks that put our company's security, reputation, and finances on the line.

Network Security Audit - technical assessment of an organization's IT infrastructure—their operating systems, applications, and more.

Internal Security Audit - penetration tests are conducting from inside the company or sometimes through a VPN.

External Security Audit - where you have your IT Security and Network Security checked by a third party remotely. The purpose is to highlight vulnerabilities and configuration issues that you may not be aware of. 

b- How can we reduce threats from malicious and destructive programs? Provide any 5 measures/steps. 

1. Install Anti-virus software from trusted sources.

Anti-virus software will protect your device from malicious software threats. It will scan your computer to detect and clean the malware and provide automatic updates to provide enhanced protection against newly created viruses.

2. Regularly update software.

By updating all your softwares regulary, it will helps stop attackers gaining access to your computer through vulnerabilities in older and outdated systems.

3. Only buy and install applications from trusted sources.

Buying apps from trustworthy sources reduces the chance of your device being infected with malware. 

4. Avoid clicking on suspicious links or download attachments from unknown sources.

 If in doubt, don't click the link. The link may direct you to a fake website where you are prompted to enter your personal details or take you to a website that directly infects your computer with malware.  Phishing scams trick people into opening emails or clicking on a link that may appear to come from a legitimate business or reputable source. 

5. Install Firewall.

A firewall provides an extra barrier against malware, reducing the chance of attack and it helps malicious attacks by blocking all unauthorized access to or from a private computer network