Information Security Initiative 2007 Ljubomir Trajkovski, M.Sc. CMC Information Security Management Consultant TRAJKOVSKI & PARTNERS CONSULTING [email_address] Skopje, MACEDONIA Third International Conference Inclusive e- Government Skopje, 29-30 Nov 2007

What I want to present ? “ Opening” message InfoSec Initiative – what we did ? Why we did it ? What is needed for success of InfoSec Initiative ? “ Message” – Who will provide it ?

“ Opening” message

InfoSec Initiative – what we did ?

Why we did it ?

What is needed for success of InfoSec Initiative ?

“ Message” – Who will provide it ?

The “Opening” Message (Information) Security is EVERYBODY need and responsibility!

(Information) Security

is

EVERYBODY

need and responsibility!

Supportive questions Who don’t need (information) security ? Are you filling responsible for YOUR OWN (information) security ?

Who don’t need (information) security ?

Are you filling responsible for YOUR OWN (information) security ?

InfoSec Initiative (ISI) what we did ? Project delivered by Metamorphosis Objective : to INCREASE InfoSec Awareness for citizen, business, government and civil society at large” Result : Booklet Guide to InfoSec for everyone Who did it : group of InfoSe “champions”

Project delivered by Metamorphosis

Objective :

to INCREASE InfoSec Awareness for citizen, business, government and civil society at large”

Result :

Booklet Guide to InfoSec for everyone

Who did it :

group of InfoSe “champions”

And the RESULT is ….

Why we did it ? Similarities “teenagers sex” v.v. “InfoSec” Everybody speak about it not so many know what it is Only a few do it properly Our simple National contribution to “ i2010: A strategy for a secure Information Society ”

Similarities “teenagers sex” v.v. “InfoSec”

Everybody speak about it

not so many know what it is

Only a few do it properly

Our simple National contribution to

“ i2010: A strategy for a secure Information Society ”

i2010: A strategy for a secure Information Society The Strategy proposes an inclusive process in which all stakeholders take up their part of responsibility: • Public administrations have a particularly important role to play, for example by giving high priority to the security of their own networks and thus serving as an example to other stakeholders. • Private sector enterprises, in turn, need to address security as an aspect of customer service and an enabler for new business opportunities and innovative societal services rather than a necessary evil or a purely legal obligation. Individual users need to understand that the integrity of their home system is an important component of overall network stability. They must ensure their own machines do not damage other user’s data and systems.

The Strategy proposes an inclusive process in which all stakeholders take up their part of responsibility:

• Public administrations have a particularly important role to play, for example by giving high priority to the security of their own networks and thus serving as an example to other stakeholders.

• Private sector enterprises, in turn, need to address security as an aspect of customer service and an enabler for new business opportunities and innovative societal services rather than a necessary evil or a purely legal obligation.

Individual users need to understand that the integrity of their home system is an important component of overall network stability. They must ensure their own machines do not damage other user’s data and systems.

I2010 A strategy for secure Information Society The Strategy consists of three elements: • Given the important and complementary roles of both public and private sector actors in the development of a security culture in Europe, security policy can only be developed in an effective manner on the basis of an open and inclusive multi stakeholder dialogue . • Partnerships are needed so that each actor can fulfil their own role in the broader context of network and information security. • The empowerment of each stakeholder group is a prerequisite to foster awareness of security needs and risks in order to promote network and information security.

The Strategy consists of three elements:

• Given the important and complementary roles of both public and private sector actors in the development of a security culture in Europe, security policy can only be developed in an effective manner on the basis of an open and inclusive multi stakeholder dialogue .

• Partnerships are needed so that each actor can fulfil their own role in the broader context of network and information security.

• The empowerment of each stakeholder group is a prerequisite to foster awareness of security needs and risks in order to promote network and information security.

What is needed for success of InfoSec Initiative & Strategy? We need You !

We need You !

World wide InfoSec “enemies” /obstakles “ Enemy” No.1: yours optimism “ Enemy” No. 2 : your ignorance “ Enemy No. 3 : your lack of awareness

“ Enemy” No.1: yours optimism

“ Enemy” No. 2 : your ignorance

“ Enemy No. 3 : your lack of awareness

Why YOU are “enemies” ?

Hemingway find the idea where from ? Novel title page : "For Whom the Bells Tolls ?“ Moto from second page : "Therefore never send to know for whom the bells tolls; it tolls for you“ Source : ( Meditation #17 By John Donne From Devotions upon Emergent Occasions (1623), XVII Perchance(1), he for whom this bell tolls may be so ill, as that he knows not it tolls for him; and Perchance (2) I may think myself so much better than I am, as that they who are about me, and see my state, may have caused it to toll for me, and I know not that.

Novel title page :

"For Whom the Bells Tolls ?“

Moto from second page :

"Therefore never send to know for whom the bells tolls; it tolls for you“

Source :

( Meditation #17 By John Donne From Devotions upon Emergent Occasions (1623), XVII

Perchance(1), he for whom this bell tolls may be so ill, as that he knows not it tolls for him; and

Perchance (2) I may think myself so much better than I am, as that they who are about me, and see my state, may have caused it to toll for me, and I know not that.

Comments ….? I have NO comments? Have YOU ?

I have NO comments?

Have YOU ?

Closing Message (Information) Security is EVERYONE Need & Responsibility

(Information) Security

is

EVERYONE

Need & Responsibility

Before the end Please take your personal copy of InfoSec booklet

Please take your personal copy of InfoSec booklet

At the end … This presentation was “ from hard to hard” Thanks for your presence Ljubomir Trajkovski [email_address] +389 75 279 025

This presentation was

“ from hard to hard”

Thanks for your presence

Ljubomir Trajkovski

[email_address]

+389 75 279 025