Decomposing the threats from a cyber-security perspective

1. Wicked Design Solutions
Lisa Martinez

2. Generic Components
• Person
• Person with relationships to a legal entity
Person in a retail transaction
• Person elects to buy an asset
• Person commits to an investment
Perspectives
2013 @ Copyright WICKED Design Solutions

3.  How many companies have strong cultures of governance
and even a consistent awareness when polling employees?
◦ For me governance starts with the Board of Directors, who craft the
expectations for known and potential unknowns impacting the way
decisions are made.
2013 @ Copyright WICKED Design Solutions

4. • Employee
Party •
•
•
Supplier
Customer
Consumer
Offer • Products/Software
• Services
Financial
• Location
• Pricing and interest with tax and duty fees
• Structure of financing
2013 @ Copyright WICKED Design Solutions

5.  Management Capability
◦ Manage the create, read and update with managed
record retention versus delete or purge.
 Business Activities must be grouped in a series of Task
to ensure due diligence.
◦ ETL – Integration technology must not alter inputs
in backend processes.
 Transaction Capability
◦ Expense
◦ Revenue
2013 @ Copyright WICKED Design Solutions

6. Personal Information
Driving
Birth Social Education and
Health
Record Security # Records Records Insurance
Records
 Any company can collect these details from a
number of sources.
 Voice of the customer
◦ “My fathers name was never used other than k-6th
grade.
 Can you tell me how my data as a minor was sold to a
search company?
 I’ve never had an id or anything official using the name
in that name. “ 2013 @ Copyright WICKED Design Solutions

7. Personal
Information
Professional Banking
Networks Birth
To get these Record
Social
Networking services
School Social
Security #
Job Education
Records
Person
Car Health
Records
Each assigns Driving
Phone and
an ID Insurance
Records
2013 @ Copyright WICKED Design Solutions

8. 2013 @ Copyright WICKED Design Solutions

9. an education
consumer
an occupant or a driver and
home owner insured person
a healthcare
an Employee
insured person
2013 @ Copyright WICKED Design Solutions

10. Personal Connections
Job Search
Person
2013 @ Copyright WICKED Design Solutions

11. MFG Broker and Dealer Finance Company
MFG Broker and Dealer Finance Company
• Customer • Customer • Consumer
• Broker and • Finance Customer • Customer • Customer • Consumer
Dealer Company • Supplier Broker • Broker and • Finance Customer
and Dealership Dealer Company • Supplier Broker
and Dealership
Organization to Organization Employee 1 per organization
Current State Networked Future State
2013 @ Copyright WICKED Design Solutions

12. 6 4 2
Variance +2 Captures of Personal Information
Less risk to an error in releasing my
details
Less power in transporting mine and
others between organizations
2013 @ Copyright WICKED Design Solutions

13. MFG
Employee
Financial
Dealer
Investment
Broker
2013 @ Copyright WICKED Design Solutions

14. Manufacturer
builds a thing
A finance
company invest
The Dealership or
Broker
Acquires the
Thing
in the thing for
the consumer Things from
MFG
A consumer
buys or
commits to
finance a
things
2013 @ Copyright WICKED Design Solutions

15.  Anywhere in the world we have things
organizations sell in the private sector.
 Anywhere in the world a consumer may
purchase with cash or credit.
 A finance company may make an investment
in a legal binding relationship with the
consumer who becomes the finance
companies customer.
Private Industry
• Localization – any geography
• For a profit indicates several things around tax
and reporting to the Security Exchange
Commission.
2013 @ Copyright WICKED Design Solutions