building secure digital services
TRANSCRIPT
![Page 1: Building secure digital services](https://reader036.vdocument.in/reader036/viewer/2022070600/58aa20931a28abff6b8b5b31/html5/thumbnails/1.jpg)
BUILDING SECURE DIGITAL SERVICES
Manchester, 22nd October
Dave BeesleyTechnical DirectorNetDef
![Page 2: Building secure digital services](https://reader036.vdocument.in/reader036/viewer/2022070600/58aa20931a28abff6b8b5b31/html5/thumbnails/2.jpg)
Agenda
Evaluating IT infrastructure and processes to meet the needs of a rapidly changing sector.
Planning a robust infrastructure on which to build secure digital services.
Answering the security questions posed by regulatory compliance requirements.
![Page 3: Building secure digital services](https://reader036.vdocument.in/reader036/viewer/2022070600/58aa20931a28abff6b8b5b31/html5/thumbnails/3.jpg)
What are digital services?
External Internal
• Digital inclusion solutions• Rent payments• Access to tenant facilities• Telemedicine
• CRM solutions for tenant management
• Agile working systems• Data sharing amongst
apps
![Page 4: Building secure digital services](https://reader036.vdocument.in/reader036/viewer/2022070600/58aa20931a28abff6b8b5b31/html5/thumbnails/4.jpg)
× Access× Skills × Motivation× Trust
Over a third of these are in social housing
Why?
Digital Exclusion
~20% of population not using digital services
![Page 5: Building secure digital services](https://reader036.vdocument.in/reader036/viewer/2022070600/58aa20931a28abff6b8b5b31/html5/thumbnails/5.jpg)
Security considerations
• Tenants feeling unsafe online/cyber-crime• Mitigated by training/help with getting online
• https://www.cyberstreetwise.com/• https://www.getsafeonline.org/
• Mitigated by technology• Gateway level security software• Access to security software
• Potential reputational damage• Tenants accessing illegal material
• AUP and monitoring/controls
• Cost of implementation of security• Assurance/testing/compliance/management
![Page 6: Building secure digital services](https://reader036.vdocument.in/reader036/viewer/2022070600/58aa20931a28abff6b8b5b31/html5/thumbnails/6.jpg)
Current IT Infrastructure
What does the business require?
• SLAs• Capacity
How are projects developed with the
business?
Cyber risk on corporate risk
register?
Business continuity and disaster recovery
plans?
Evaluation & asset management
![Page 7: Building secure digital services](https://reader036.vdocument.in/reader036/viewer/2022070600/58aa20931a28abff6b8b5b31/html5/thumbnails/7.jpg)
Planning for future developments
Agility & flexibility of infrastructure
Speed of execution for new projects
Cloud versus on-premise or hybrid
Security considerations
baked into projects Saves money Reduces risk
![Page 8: Building secure digital services](https://reader036.vdocument.in/reader036/viewer/2022070600/58aa20931a28abff6b8b5b31/html5/thumbnails/8.jpg)
Compliance considerations
Testing/assurance Safe Harbour EU ruling – important for cloud
PCI/Data Protection/ISO27001
Ensuring reputational integrity
Which standards are relevant? Who to turn to for advice?
![Page 9: Building secure digital services](https://reader036.vdocument.in/reader036/viewer/2022070600/58aa20931a28abff6b8b5b31/html5/thumbnails/9.jpg)
Our approach
Prevent
Detect
Respond
![Page 10: Building secure digital services](https://reader036.vdocument.in/reader036/viewer/2022070600/58aa20931a28abff6b8b5b31/html5/thumbnails/10.jpg)
NetDef projects
Regenda Group • Disaster Recovery
and Business Continuity Strategy
Guinness Partnership • Security
infrastructure Auditing Services
NDA• Security Auditing for
Compliance
Recent examples of consultancy work in housing associations
![Page 11: Building secure digital services](https://reader036.vdocument.in/reader036/viewer/2022070600/58aa20931a28abff6b8b5b31/html5/thumbnails/11.jpg)
Your to do list
Security risk assessment – risk register
Capacity planning and/or evaluation of future needs
Testing/security assessment for compliance
Business continuity and disaster recovery planning
Asset Management
![Page 12: Building secure digital services](https://reader036.vdocument.in/reader036/viewer/2022070600/58aa20931a28abff6b8b5b31/html5/thumbnails/12.jpg)
Thank you
Dave Beesley, Managing Director, NetDef