Embed Size (px)
Citation preview
Visit: www.pgitl.com Visit: www.pgitl.com
Cyber Essentials and ISO27001
Visit: www.pgitl.com
Senior Cyber Security Consultant
@PGICyber and @SteveMair13
Steve Mair
Visit: www.pgitl.com
3 Questions to Start
Visit: www.pgitl.com
What percentage of FSB members have Cyber Essentials or ISO 27001?
Do you know…
Source: FSB “Cyber Resilience: How to protect small firms in the digital economy”
2%
Visit: www.pgitl.com
Did you know…
Source: FSB “Cyber Resilience: How to protect small firms in the digital economy”
Phishing emails
Spear phishing emails
Malware attacks
49% 37% 29%
Password Policy
Documented incident plan
24% 4%
Visit: www.pgitl.com
Complicated is not always best
Visit: www.pgitl.com
Today’s Topics
Cyber Essentials
ISO 27001
How do you choose
Visit: www.pgitl.com Visit: www.pgitl.com
Cyber Essentials
and
Cyber Essentials Plus
Visit: www.pgitl.com
The journey so far
Making the UK a Safer Place to do Business
2011
Cyber Essentials
2014
Ten Steps to Cyber Security
2012
Visit: www.pgitl.com
Government requirement
Industry recognition
Threat protection
Customer expectation
Why Cyber Essentials?
Visit: www.pgitl.com
26 Controls in total
Content
Boundary Firewalls
and
Internet Gateways
Access Control
Malware Protection Patch Management
Secure
Configuration
External Penetration
Test
Visit: www.pgitl.com
Self Certification
Third Party Certification
Annual recertification
How
Visit: www.pgitl.com Visit: www.pgitl.com
ISO / IEC 27001
Visit: www.pgitl.com
The Journey
1995
BS7799 Introduced
1998
BS7799 Revised
2000
Adopted as ISO/IEC 17799
2005
ISO/IEC 17799 Revised
2007
ISO/IEC 27002
Adopted 2013
ISO/IEC 27002 Revised
Visit: www.pgitl.com
Global brand
Industry recognition
Threat protection
Customer expectation
Why ISO 27001?
Visit: www.pgitl.com
114 controls in total
Content
Information Security Policies
Organisation of Information Security
Human Resources Security
Asset Management Access Control Cryptography Physical and
Environmental Security
Operations Security Communications Security
System Acquisition, Development and
Maintenance Supplier Relationships
Information Security Incident Management
Information Security aspects of Business
Continuity Mangement
Compliance
Visit: www.pgitl.com
Timescales
Third Party Certification
Maintenance Visits
3-Yearly Recertification
How
Visit: www.pgitl.com Visit: www.pgitl.com
Cyber Essentials
v
ISO / IEC 27001
Visit: www.pgitl.com
Comparison
Review
CE CE Plus ISO27001
Internal External External
Visit: www.pgitl.com
Comparison
CE CE Plus ISO27001
Frequency Annual Annual 3 Years
Visit: www.pgitl.com
Comparison
CE CE Plus ISO27001
Domains 5 5 14
Visit: www.pgitl.com
Comparison
CE CE Plus ISO27001
Controls 26 26 114
Visit: www.pgitl.com
Comparison
CE CE Plus ISO27001
Time 1-2 Days 3-5 Days 6-9 Months
Visit: www.pgitl.com
Comparison
Review
CE CE Plus ISO27001
Frequency
Domains
Controls
Time
Internal External External
Annual Annual 3 Years
5 5 14
26 26 114
1-2 Days 3-5 Days 6-9 Months
Visit: www.pgitl.com Visit: www.pgitl.com
How do you choose?
Visit: www.pgitl.com
Costs Benefits Risks Opportunities GDPR
Visit: www.pgitl.com
Today we talked about…
History
What they are
Selection
Next steps
Visit: www.pgitl.com
Complex is not always best
Remember…
Photo: CEN
Romantik Seehotel Jaegerwirt in Austria
Visit: www.pgitl.com
• PGI Portal: https://cyberservicesportal.pgicyber.com
• PGI Services: https://pgicyber.com/products • This presentation: http://bit.ly/2jCnDMT @PGICyber and @SteveMair13
Thank You
