Claranetpresentation

“ Beyond technology: Five ways to change your v alue perception as a security professional” ClaraNet, London, 19 th June 2007 Des Ward MSc MBCS CITP A.Inst.ISP Director of Security Awareness UK Chapter – Information Systems Security Association

Who am I? ,[object Object],Five ways to change your value perception ,[object Object],[object Object],[object Object],[object Object],[object Object]

Five ways to change your v alue perception ,[object Object],[object Object],[object Object],[object Object],[object Object],Five ways to change your value perception

1 – Be an effective communicator ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Five ways to change your value perception

Speaking the language of the board ,[object Object],Five ways to change your value perception ,[object Object],[object Object],[object Object],[object Object]

Better communication of issues ,[object Object],[object Object],[object Object],[object Object],Five ways to change your value perception

Time for a change? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Five ways to change your value perception

2 – Educate, don’t dictate! ,[object Object],[object Object],[object Object],[object Object],Five ways to change your value perception “ Most organisations using computers are vulnerable to fraud perpetrated by employees preparing data for entry into a computer.” (Bainbridge, 2004) "Last year was the first year that proceeds from cybercrime were greater than proceeds from the sale of illegal drugs, and that was, I believe, over $105bn“ (Valerie McNiven, 2005) ,[object Object],[object Object]

Tackling the sociological threats? ,[object Object],[object Object],[object Object],[object Object],[object Object],Five ways to change your value perception

Educating the end user ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Five ways to change your value perception

3 – Think about risk ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Five ways to change your value perception

The traditional view of the corporate network… Five ways to change your value perception

M&Ms are dead – enter the limpet! Five ways to change your value perception ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],75% of all attacks occur at application layer (Gartner, 2005)

Getting the security spend right ,[object Object],Five ways to change your value perception The control – a Doberman called Barney Hmm, were all risks considered in the risk assessment? ‘… If the risk assessment is not carried out effectively, then the organisation will either waste money or be exposed to an unacceptable risk’ (Jones and Ashenden, 2005)

4 – Be useful ,[object Object],[object Object],[object Object],[object Object],[object Object],Five ways to change your value perception

Beware the end user! Five ways to change your value perception ,[object Object],[object Object],Am I happy? No? Disbenefit! It this useful? No? Don’t use/circumvent! (Derived from DeLone and McLean, 2003)

Involving the business ,[object Object],[object Object],[object Object],[object Object],Five ways to change your value perception

Talking the right language ,[object Object],Five ways to change your value perception (Derived from Ward et al, 2006)

5 – Provide secure solutions – not secure systems! ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Five ways to change your value perception

Maximising benefit ,[object Object],[object Object],[object Object],[object Object],[object Object],Five ways to change your value perception

Architecture needs business drivers! ,[object Object],Five ways to change your value perception

Mapping out the business... ,[object Object],Five ways to change your value perception

...maximises business performance ,[object Object],Five ways to change your value perception

Shared application environments cause issues! Five ways to change your value perception Financial apps Facilities apps HR apps BI apps FTP, Telnet, RDP, TFTP etc Telephony apps Internal network Customer apps eComm apps DB apps

Move to CIA-risk based placement! Five ways to change your value perception HR apps Confidentiality high domain Customer apps Financial apps S/FTP, SSH, hardened configs, encryption etc Fault tolerance High speed links Monitoring, HIPS, encryption, f/t links etc Availability high domain Telephony apps eComm apps BI apps Mixed risk domain DB apps Facilities apps Internal network Users

Summary ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Five ways to change your value perception

So what are the ISSA doing to help? ,[object Object],[object Object],[object Object],[object Object],Five ways to change your value perception

Questions? [email_address] Five ways to change your value perception

Claranetpresentation

Recommended

Recommended

More Related Content

What's hot

What's hot (19)

Viewers also liked

Viewers also liked (20)

Similar to Claranetpresentation

Similar to Claranetpresentation (20)

Recently uploaded

Recently uploaded (20)

Claranetpresentation

Editor's Notes