CoerceBlock Study Guide — Remote Worker Protection

1. Short-Answer Quiz 2. Answer Key 3. Essay Questions 4. Glossary

Part 1

Short-Answer Quiz

Answer the following questions in 2–3 sentences based on the information provided in the source text.

What specific vulnerability does the CoerceBlock system aim to address regarding remote IT staff?
According to the text, what types of sensitive information are at risk if a remote worker's computer is compromised?
Where should the security cameras be positioned in a home office according to this proposal, and why?
What is the primary function of the AI when analyzing the video feed from a staff member's home?
How does the system respond to the detection of an unauthorized person in the home office regarding network credentials?
What happens to the staff member's computer hardware once a threat is detected?
What role does physical security play once the AI triggers an alert?
What is the purpose of the automated report mentioned in the text?
Under what conditions can a staff member's corporate access be reinstated?
Why is the focus of the camera on the room's entrance rather than the computer screen?

Part 2

Answer Key

1.Vulnerability

Remote IT staff are often targeted because they possess full access to corporate networks, even while working from home. The system specifically addresses the risk of these employees being forced under duress to grant access to threat actors.

2.Sensitive Information

The text identifies personal information and sensitive business data, such as business plans, as being at risk. Additionally, highly sensitive financial data like credit card numbers and CVV codes are cited as primary targets for theft.

3.Camera Placement

One by two cameras should be placed facing the door of the home office. This placement is intended to monitor who is entering the room and who is currently positioned in front of the computer rather than monitoring the work on the screen.

4.AI Functionality

The AI is used to monitor the video feed to ensure that the only person present in the home office is the authorized staff member. If the AI detects an extra person or persons, it immediately initiates a series of protective protocols.

5.Credential Response

Upon detecting a threat, the system immediately revokes the staff member's SSH keys. It also temporarily disables the staff member's domain controller account to prevent any further network penetration.

6.Hardware Status

The system suspends all access for the staff member, effectively rendering the computer useless to any threat actors present. This ensures that even if the physical hardware is seized, no corporate data can be accessed.

7.Physical Security

The system automatically alerts armed response security teams to the location. Their mission is to extract the staff member and the computer equipment while attempting to arrest the threat actors.

8.Automated Reporting

The system generates a report automatically based on the video evidence collected and the subsequent security actions taken by the various parties involved. This serves as a formal record of the incident for the company.

9.Restoration of Access

Access is only continued once it has been verified that the staff member is no longer under a security threat. This ensures the network remains protected until the physical environment is confirmed safe.

10.Monitoring Focus

The goal is to identify unauthorized physical presence and potential duress situations rather than monitoring the employee's work. By focusing on the door and the area in front of the computer, the system prioritizes physical security and personnel verification.

Part 3

Essay Questions

Use the concepts from the source text to develop detailed responses to the following prompts.

1.The Integration of Physical and Digital Security

Analyze how CoerceBlock bridges the gap between physical home security and digital network integrity. Discuss the implications of using physical presence as a "kill switch" for network access.

2.Risk Mitigation for High-Access Personnel

Evaluate the specific risks faced by IT staff with "duty for seven" or full network access in a remote environment. How does the proposed solution mitigate the unique dangers of working from home in high-risk regions?

3.The Role of AI in Threat Detection

Discuss the necessity of AI in this security model. Why is automated detection required for this specific scenario, and what are the advantages of an AI-driven response over manual security monitoring?

4.Incident Response and Extraction

Describe the lifecycle of a security event as outlined in the text, from the moment an unauthorized person is detected to the final arrest and reporting phase.

5.Privacy vs. Security in Remote Work

Although the text states the cameras do not watch the staff member's screen, the system involves constant video monitoring of a home office. Discuss the balance between corporate security requirements and the privacy of a staff member's home environment based on the proposed solution.

Part 4

Glossary of Key Terms

Term	Definition
Armed Response	Private or specialized security personnel dispatched to a location to intervene in physical threats or crimes.
CVV Number	The "Card Verification Value" on a credit card; highly sensitive financial data targeted by threat actors.
Domain Controller	A server that responds to security authentication requests and controls access to a corporate network.
Duress	A situation where a staff member is forced to perform actions (such as granting network access) against their will through threats or force.
Extraction	The physical removal of a staff member and their equipment from a dangerous environment by security forces.
SSH Keys	Secure Shell keys; digital credentials used to provide secure, encrypted access to remote computers and servers.
Suspension of Access	The immediate revoking of a user's ability to log into or interact with a corporate network.
Threat Actor	An individual or group that poses a security risk, such as those attempting to steal data or coerce an employee.
Verification	The process of confirming that a physical security threat has ended before restoring digital access to a staff member.