Upload File

information security

26
Information Security

Upload: jean

Post on 21-Mar-2016

54 views

Category:

Documents


0 download

Report

Tags:

DESCRIPTION

Information Security. The CIA Triad. Confidentiality. The state of being secret. Security. Integrity. Availability. Present and ready for use. The state or quality of being entire or complete. The Job. http://technet.microsoft.com/en-us/library/cc723507.aspx. Agenda. Some Threats - PowerPoint PPT Presentation

TRANSCRIPT

Page 1: Information Security

Information Security

Page 2: Information Security

The CIA TriadConfidentialitConfidentialit

yy

IntegritIntegrityy

AvailabiliAvailabilityty

The state of being secret

The state or quality of being

entire or complete

Present and ready for use

SecuritySecurity

Page 3: Information Security

The Job

http://technet.microsoft.com/en-us/library/cc723507.aspx

Page 4: Information Security

Agenda

Some ThreatsSome Controls

Page 5: Information Security

San Francisco – Terry Childs

http://articles.sfgate.com/2008-12-27/bay-area/17133065_1_computer-network-mr-childs-passwords

Page 6: Information Security

UBS – Roger Duronio

http://www.cbsnews.com/stories/2002/12/18/tech/main533450.shtml

Page 7: Information Security

Certegy Check Services

Page 8: Information Security

Lost Backup Tapes

Page 9: Information Security

Australia – Vitek Boden

“…marine life died, the creek water turned black and the stench was unbearable for residents…”

- Australian EPA

This file is licensed under the Creative Commons Attribution-Share Alike 2.5 Generic license

Page 10: Information Security

California – Mario Azar

Page 11: Information Security

Google and China

Page 12: Information Security

Waheed Mahmood

http://news.bbc.co.uk/

Page 13: Information Security

Lost Laptop

Page 14: Information Security

Scottish Council Loses Pay Details

Page 15: Information Security

Customer Information in Bins

Page 16: Information Security

The Biggie …

Page 17: Information Security
Page 18: Information Security

SMART

Page 19: Information Security

Where is Security?

IT Security?

Information Security?

Physical Security?

Business Security? Business Assurance?

Page 20: Information Security

Some Problems

IT VendorsPeople – IT, employees, others …ComplexityTechnologyControl SystemsAnyone who thinks that I am responsible for Information Security

Page 21: Information Security

Agenda

Some ProblemsSome Solutions

Page 22: Information Security

- 22 -

Security Golden Rules

Accept Challenges

Display Your Badge

Assess Risks

Protect Your Identity

Thirty Minute Rule

Page 23: Information Security

Security Program

Risk ManagementPolicy … StandardsBusiness EngagementCulture / Behaviour ChangeSecurity ArchitectureMetrics and MeasurementsManagement SystemMoney / StaffControls

Page 24: Information Security

Further Reading

Bruce SchneierSANS Internet Storm Centre / NewsbitesSecurityFocusTitan RainAdvanced Persistent ThreatJericho Forum

Page 25: Information Security

Questions

Page 26: Information Security

Reading List

Ross Anderson: Security EngineeringBruce Schneier: Secrets & Lies


Security Information and Event Management (SIEM) for ... · Security Information and Event Management (SIEM) ... to improve your organization’s security ... Security Information

Information Assurance/Information Security

Information technology- security techniques information ... · ISO/IEC 27001 was prepared by Joint ... Information technology — Security techniques — Information security management

Information Security Information Security Management · PDF fileInformation Security Information Security Management Framework Standard Agencies must develop an Information Security

Information Security Sharon Welna Information Security Officer

Workshop „Information Security“ Protecting information efficiently€¦ · ABB ABILITY™ CYBER SECURITY SERVICES Workshop „Information Security“ Protecting information efficiently

Information Assurance/Information Security · Managing Security of Information. Core Principles. Integration - Security must be coordinated and integrated. Reassessment - Security

Information Technology Information and Systems Security/Compliance Information Security

Information Security Supporting an Information …Information Security Report 2010 Year ended March 31, 2010 NEC Corporation Information Security Supporting an Information Society

ISO 27001 Information Security Management System - Information Security … · 2013-09-20 · ISO 27001 Information Security Management System - Information Security Policy Document

Chapter 1: Information and Data Security Fundamentals · Chapter 1: Information and Data Security ... Information Security Risk Management. ... Information Security Handbook [ 15

Information Security 1 Information Security: Demo of Some Security Tools Jeffy Mwakalinga

Information Security 1 Information Security: Security Tools Jeffy Mwakalinga

network security / information security

What Is Information Security? – Security Basics 101 Shannon M. Culp Manager Information Security – Information Security Officer (CISO)

Information Security Management. Workshop Agenda Understanding your Information Security EnvironmentUnderstanding your Information Security Environment

Information Security & Identity Theft - Banking with … · Information Security & Identity Theft What is Information Security? (continued) ® Information Security Core Principles

Information Systems Security Information Security for Web- based Applications

IT Security Information Security & Appropriate Use of Information Resources

Handbook AS-805 - Information Security - November 2019 · 2-2.21 Manager, Corporate Information Security Office Information Systems Security. information security. Service. Service

Information Security- Perspective for Management Information Security … · 2011-03-18 · 3 Information Security Management Information Security Management “Information security

Information Security Compliance Reporting Schedule SIMM …INFORMATION SECURITY COMPLIANCE REPORTING SCHEDULE Sorted by Agency . Office of PageInformation Security Information Security

Information Systems Security Information Security & Risk Management

Information Security - Information Classification · PDF fileInformation Security - Information Classification . ... on and recommending information security standards on data classification

SAM INFORMATION SECURITY (Office of … – INFORMATION SECURITY (Office of Information Security) Rev. 426 ... INFORMATION ASSET MANAGEMENT 5305.5 ... SAM – INFORMATION SECURITY

Information technology – Security techniques – Information ... · INTERNATIONAL STANDARD ISO/IEC 27005 Information technology – Security techniques – Information security

Information Security Awareness Training. Agenda What is Information Security? Information Ecosystem C-I-A Godrej & Boyce Information Security Organization

Information Systems Security Operational Control for Information Security

Unit4 Information Security Management Policyinfo.unit4.com/.../UKI...Information-Security-Management-Policy-Man… · Unit4 Information Security Management Policy “To promote information

Cyber Security Specialist Information Security • Cyber ... · Cyber Security • Security Analyst • Cyber Security Specialist Information Security • Cyber Operations Manager

1 For System Administrators INFORMATION INFORMATION SYSTEM SECURITY INFORMATION INFORMATION SYSTEM SECURITY

FOUNDATION CERTIFICATE IN INFORMATION SECURITY · The Foundation Certificate in Information Security ... MODULE 1 Introduction to Information Security ... Introduction to Information

Security Cooperation Information Portal (SCIP) Case ... SCIP EXERCISE BOOK... · Security Cooperation Information Portal (SCIP) Case Information ... The Security Cooperation Information

Information technology - Security techniques - ... information security

Security Information Systems Security