Digital Security,Business, People and Economics

1. Digital Security Business, People and Economics T Koshy NSDL http://www.rollingstone-revelations.blogspot.com/

2. The digital World The world is getting more and more digital Security threats in the digital world Security no more domain of hardware expert It is about risk management It is a management decision

3. Risk Management Components Risk Elements Probabilities Impact Cost & Benefit of Risk Mitigation Need for a New Framework Business Compulsion Human Nature Incentives

4. The Human Element Two Ends of the spectrum One end – The inability to understand risk Natural Response Flight or Fight Hold the instinct and analyze Optimism Bias Quirks of Software Industry Impact on Security

5. Human Element Other End – Paranoid Reaction Constant Selling Pressure Advice of expert Ambient Noise Recent Events Need for a Balanced View Need for continuous rebalance.

6. NSDL Case Study .

7. NSDL Public Good Demat – Get it right the first time Primary Responsibility to the Depository State-of-the-art Technology PKI DRS Appropriate Tools Integrity and Honesty – The core values Risk as a part of Management Process Security Committee RAG Certifications Audits

8. Learning Information Security is about Managerial Choice Whether Gadget or Process. It should justify the merit Not a One-Time Activity – A Continuous Process It should form a part of organizational process and culture But Don’t Forget Your Client