APNIC Senior Internet Resource Analyst Adli Wahid gives an overview of the importance of cybersecurity at the Afghanistan IGF 2023, held on 6 December 2023.
3. Why Cybersecurity Is
Critical ?
• Cyber space is critical for running the
world!
• Protection
o Information
o Infrastructure (Network, System)
where Information is stored or
processed
o People who handle information and
have access to Information
3
4. Another View
• Why We Do Security?
oConfidentiality
oIntegrity
oAvailability
• Ransomware or Data breach
incidents have impact on all of the
above
4
5. How Do We Secure
Things?
• There’s no 1 single solution
o Process
o People
o Technology
• Many Security Controls
• Security Controls & Expertise cost money
5
6. Who Are We Defending Against?
• People with
o Motivation
o Means
• Many labels
o Hackers / Crackers
o Nation State Actors
o Cyber Criminals
o Fraudsters
• Illegal Activities
o Unauthorised Access
o Defrauding
o Money laundering
6
Recommended Books
Imaginary “Hacker”
7. Security in Organizations
• Security incidents can impact organizations and their customers
• May have to abide by Laws & Regulations related to security
• Security consists of many activities that needs to be managed
• Security people can have different specializations
oManaging / Leading Security
oHardening systems & infrastructure
oMonitoring, Incident Response, Forensics
oAudit / Security Assessment
• Think of Hospitals vs Banks
7
8. Security for Individuals
• We share a lot of information on line
• We use (trust) many providers with our data
• Need to secure our information & devices
• Anti-virus, Multi-factor Authentication, Password Manager, Backup
• We need to ensure those collecting (storing) our information have
good security
• Remind our family members & close friends about security
8
9. Security Ecosystem
• Cyber Security consists of multiple domains that must be addressed
• Different stakeholders need to work together:
o Policy Makers
o Vendors
o Organisations
o Civil Society
o Law Enforcement Agencies
o Security Community
o Telcos / ISPs, Service Providers
• Collaboration happens at national, regional and international level
9
10. Summary
• Cyber Security is very critical (organizational & personal)
• Security is not just technical!
• Protection of information & assets leads to achieving
confidentiality, availability and integrity – and a safe &
secure world for everyone
• Being aware of security issues is part of being secure
• Consider being a cyber security expert
• Take advantage of free resources to learn security such as
APNIC Academy (https://academy.apnic.net)
10