Interview Question

[AmDaMan]

Hi got an interview lined up and i've been asked to think about this question:

“Considering the industries that the E.ON UK business units operate in; what security issues must the IT Service provider consider when providing IT services to their customer.”

Right, E.ON UK operate in a few different couple of industries as far as i'm aware but mainly energy services.

So is the customer E.ON UK? "E.ON IS UK is the shared IT Service Provider to E.ON UK (from the website)" Initially I thought the customer was you and me.

Assuming that E.ON is a customer of E.ON UK the things I should be thinking about are:

Internal/External vulnerabilities
Level of knowledge of staff (which can aid support)
Contingency Plans

I really don't think i'm on the right lines though!

Can anyone clear it up a little?

Thanks.

 

[Morba]

expand on internal / external vulnerabilities?

 

[AmDaMan]

Umm Internal:

Mis-use of systems, implement passwords, physical locks, cctv, Cards, bugs

External:

Viruses, hackers, spyware, keep systems up to date

 

[Morba]

Umm Internal:

Mis-use of systems, implement passwords, physical locks, cctv, Cards, bugs

External:

Viruses, hackers, spyware, keep systems up to date

go deeper. passwords - rules / constraints of systems and passwords, for example.
also, things like data on removable media, on paper etc. filing / deleting / disposing of

 

[Tefal]

Filling USB ports with epoxy.