11
+ information security Fundamentals

Information security

Tags:

Embed Size (px)

DESCRIPTION

Entry level information security presentation for college freshman.

Citation preview

Page 1: Information security

+

information security

Fundamentals

Page 2: Information security

+Secure what?

Physical Assets

Network/Communications

Data/Information

Users

Ultimately, the goal is to protect information. However, to accomplish that goal physical assets must be secured and protected, and users must be educated, trained and responsible.

Page 3: Information security

+Evaluate

What is being protected? hardware, software, confidential and proprietary information

Why? your business image, business information, legal

Value? Can you afford to lose “it”? Can you afford the legal costs?

Page 4: Information security

+Layers of Protection

Physical Location Building Office Home Car Briefcase Data Center

Devices Flash Drive Laptop Workstation Smartphone Tablet

Data Image Files Text Spreadsheet Database

Page 5: Information security

+Hardware Physical Security

Fire protection

Climate control

Physical security

Page 6: Information security

+UPS – Keeping Things Running

Uninterruptible Power Supply Battery Generator

Not just computers Phones and TV A/C (select areas) Lighting (select areas)

Page 7: Information security

+Network Infrastructure

Wireless access

User accounts

Firewalls Physical Software

Network monitoring software

Physical protection

Page 8: Information security

+Data Protection

Backups Global User

Anti- Malware Virus Adware Worms Trojans

Page 9: Information security

+Data Protection

Email Encrypted Digital Signatures Security Threats

Phishing Mails

Storage devices

User authentication Do not share passwords or accounts POS and PMS systems

Timekeeping Money PCI DSS(Payment Card Industry Data Security Standards)

Compliance

Page 10: Information security

+Making it Work

Education/Training/Accountability Polices Procedures Documentation

Management Accountability Checks and balances

Page 11: Information security

+The end

Conclusion

Questions?


SAM INFORMATION SECURITY (Office of … – INFORMATION SECURITY (Office of Information Security) Rev. 426 ... INFORMATION ASSET MANAGEMENT 5305.5 ... SAM – INFORMATION SECURITY

SAM INFORMATION SECURITY (Office of … – INFORMATION SECURITY (Office of Information Security) Rev. 426 ... INFORMATION ASSET MANAGEMENT 5305.5 ... SAM – INFORMATION SECURITY

Documents
IT Security Information Security & Appropriate Use of Information Resources

IT Security Information Security & Appropriate Use of Information Resources

Documents
Information Security What is Information Security?

Information Security What is Information Security?

Documents
Information Security- Perspective for Management Information Security … · 2011-03-18 · 3 Information Security Management Information Security Management “Information security

Information Security- Perspective for Management Information Security … · 2011-03-18 · 3 Information Security Management Information Security Management “Information security

Documents
Information Security Supporting an Information …Information Security Report 2010 Year ended March 31, 2010 NEC Corporation Information Security Supporting an Information Society

Information Security Supporting an Information …Information Security Report 2010 Year ended March 31, 2010 NEC Corporation Information Security Supporting an Information Society

Documents
Information Systems Security Operational Control for Information Security

Information Systems Security Operational Control for Information Security

Documents
Information Systems Security Information Security & Risk Management

Information Systems Security Information Security & Risk Management

Documents
Workshop „Information Security“ Protecting information efficiently€¦ · ABB ABILITY™ CYBER SECURITY SERVICES Workshop „Information Security“ Protecting information efficiently

Workshop „Information Security“ Protecting information efficiently€¦ · ABB ABILITY™ CYBER SECURITY SERVICES Workshop „Information Security“ Protecting information efficiently

Documents
GOVERNMENT INFORMATION SECURITY REFORM ACT · PDF fileGOVERNMENT INFORMATION SECURITY REFORM ACT ... Information Technology Audits Staff ... “Government Information Security Reform

GOVERNMENT INFORMATION SECURITY REFORM ACT · PDF fileGOVERNMENT INFORMATION SECURITY REFORM ACT ... Information Technology Audits Staff ... “Government Information Security Reform

Documents
Information technology – Security techniques – Information ... · INTERNATIONAL STANDARD ISO/IEC 27005 Information technology – Security techniques – Information security

Information technology – Security techniques – Information ... · INTERNATIONAL STANDARD ISO/IEC 27005 Information technology – Security techniques – Information security

Documents
Handbook AS-805 - Information Security - November 2019 · 2-2.21 Manager, Corporate Information Security Office Information Systems Security. information security. Service. Service

Handbook AS-805 - Information Security - November 2019 · 2-2.21 Manager, Corporate Information Security Office Information Systems Security. information security. Service. Service

Documents
INFORMATION SECURITY STANDARD #01 Security Classification ... · INFORMATION SECURITY STANDARD #01. Security Classification of UBC Electronic Information Introduction 1. UBC Electronic

INFORMATION SECURITY STANDARD #01 Security Classification ... · INFORMATION SECURITY STANDARD #01. Security Classification of UBC Electronic Information Introduction 1. UBC Electronic

Documents
Information Security - Information Classification · PDF fileInformation Security - Information Classification . ... on and recommending information security standards on data classification

Information Security - Information Classification · PDF fileInformation Security - Information Classification . ... on and recommending information security standards on data classification

Documents
Chapter 1: Information and Data Security Fundamentals · Chapter 1: Information and Data Security ... Information Security Risk Management. ... Information Security Handbook [ 15

Chapter 1: Information and Data Security Fundamentals · Chapter 1: Information and Data Security ... Information Security Risk Management. ... Information Security Handbook [ 15

Documents
Information Security Management. Workshop Agenda Understanding your Information Security EnvironmentUnderstanding your Information Security Environment

Information Security Management. Workshop Agenda Understanding your Information Security EnvironmentUnderstanding your Information Security Environment

Documents
Certified Information Systems Security … Information Systems Security Professional (CISSP) Course 1 - Information Security and Risk Management

Certified Information Systems Security … Information Systems Security Professional (CISSP) Course 1 - Information Security and Risk Management

Documents
Information Security Awareness Training. Agenda What is Information Security? Information Ecosystem C-I-A Godrej & Boyce Information Security Organization

Information Security Awareness Training. Agenda What is Information Security? Information Ecosystem C-I-A Godrej & Boyce Information Security Organization

Documents
What Is Information Security? – Security Basics 101 Shannon M. Culp Manager Information Security – Information Security Officer (CISO)

What Is Information Security? – Security Basics 101 Shannon M. Culp Manager Information Security – Information Security Officer (CISO)

Documents
Information Security Management System.€¦ · Information Security Management System. Information Security at Bühler. V1.0, March 2020. 2 Information Cyber Security at Bühler

Information Security Management System.€¦ · Information Security Management System. Information Security at Bühler. V1.0, March 2020. 2 Information Cyber Security at Bühler

Documents
Information Assurance/Information Security

Information Assurance/Information Security

Documents
INTRODUCTION TO INFORMATION SECURITY MANAGEMENT Information Security Management (INFS 5055) & Information Security Management (INFS 3070) Study Period

INTRODUCTION TO INFORMATION SECURITY MANAGEMENT Information Security Management (INFS 5055) & Information Security Management (INFS 3070) Study Period

Documents
Security Information Systems Security

Security Information Systems Security

Documents
ISO 27001 Information Security Management System - Information Security … · 2013-09-20 · ISO 27001 Information Security Management System - Information Security Policy Document

ISO 27001 Information Security Management System - Information Security … · 2013-09-20 · ISO 27001 Information Security Management System - Information Security Policy Document

Documents
1 Information Security Karl F. Lutzen, CISSP Information Security Officer S&T IT Information Systems Security

1 Information Security Karl F. Lutzen, CISSP Information Security Officer S&T IT Information Systems Security

Documents
Information Security 1 Information Security: Demo of Some Security Tools Jeffy Mwakalinga

Information Security 1 Information Security: Demo of Some Security Tools Jeffy Mwakalinga

Documents
Information technology- security techniques information ... · ISO/IEC 27001 was prepared by Joint ... Information technology — Security techniques — Information security management

Information technology- security techniques information ... · ISO/IEC 27001 was prepared by Joint ... Information technology — Security techniques — Information security management

Documents
Information Technology Information and Systems Security ...€¦ · Information and Systems Security/Compliance Information Security Vulnerability ... Assessment or at the beginning

Information Technology Information and Systems Security ...€¦ · Information and Systems Security/Compliance Information Security Vulnerability ... Assessment or at the beginning

Documents
Information Security Maintenance Principles of Information Security Chapter 12

Information Security Maintenance Principles of Information Security Chapter 12

Documents
Information Assurance/Information Security · Managing Security of Information. Core Principles. Integration - Security must be coordinated and integrated. Reassessment - Security

Information Assurance/Information Security · Managing Security of Information. Core Principles. Integration - Security must be coordinated and integrated. Reassessment - Security

Documents
Information Security Compliance Reporting Schedule SIMM …INFORMATION SECURITY COMPLIANCE REPORTING SCHEDULE Sorted by Agency . Office of PageInformation Security Information Security

Information Security Compliance Reporting Schedule SIMM …INFORMATION SECURITY COMPLIANCE REPORTING SCHEDULE Sorted by Agency . Office of PageInformation Security Information Security

Documents