Chinatu Uzuegbu presents a practical and proactive approach to combating cyber crimes. They discuss key concepts like the CIA triad of confidentiality, integrity and availability. Cyber crimes are defined as unruly or malicious acts that lead to disclosure, modification or destruction of information assets. Some prevalent cyber crimes include social engineering, ransomware, and denial of service attacks. An effective approach involves identifying and classifying assets, determining appropriate protections, and ongoing monitoring. International frameworks and carrying stakeholders along are also emphasized.

1. Practical & Proactive Approach to
Combating Cyber Crimes.
Starring:
Chinatu Uzuegbu
CCISO, CISSP, CISM, CISA, CEH, ……
Cyber Security Consultant, RoseTech.
CyberACON21

2. Chinatu Uzuegbu
❖ Managing Cyber Security Consultant, RoseTech.
❖ Founding Past President, (ISC)2 Nigeria Chapter.
❖ Member, Global (ISC)2 Chapter Advisory Committee(CAC).
❖ Member, VigiTrust Advisory Board, Ireland.
❖ Mentor, Open Cyber Security Mentorship Program(OCMP), AfrHackton
and Cyber in Africa Initiative.
❖ Global Ambassador, WomenTech Network
❖ Finalist, Top 50 Women in Cybersecurity, Africa, 2020
❖ Alumni, London Graduate School in Collaboration with CommonWealth
University- Dubai Leadership Summit. 2020
❖ Alumni, University of Liverpool- MSc. Information Systems Management
❖ Alumni, University of Port Harcourt-BSc. Computer science & Maths.
❖ Over 15 years Wealth of experience in IT and 10 years in Information
Security with FIs, Manufacturing and Computer Firms.
❖ Professionally:CCISO, CISSP, CISM, CISA, CEH and other related IT
Certifications.
❖ Professional Membership: (ISC)2, ISACA, EC-COUNCIL, CSEAN.
❖ Participated and Attended both International and Local Conferences.
❖ Aside Profession, inclined to Learning New Things, Reading, Cooking and
Adventures.
❖ Open to Cyber Security Related Services.

3. Preamble
Crime
Cyber
Cyber
Security
Proactive & Practical Approach to Combating Cyber Crimes:
Cyber
Crimes
The thieves are in
White Collar
Suits!
Life is a war
zone!
Concept of the
CIA Triad
❖ Identify
❖ Classify
❖ Determine
❖ Protect
❖ Monitor
Concept of The
Cybernetics

4. Crime
Life indeed is a War Zone
Any unruly behaviour that is punishable by
Law:
Against Morality
Against Persons
White-Collar
Organized Crime
Against Property
Hate/Malicious

5. Cyber
The Concept of The Cybernetics
❖ Coined out from the word Cybernetics.
❖ Cybernetics is the study of Medical Science, Biological Science,
Applied Science, Natural Science, Engineering, Electronic devices,
Data, Information, Artificial Intelligence, Machine Learning ,
Infrastructures, Computers, Laptops, Technology,
Communications, and other related systems with the aim of
promoting good governance and Control around the
inter-connectivity and interoperability of these elements-The
Cybernetic Elements.
❖ Cybernetics is derived from the Greek word Kybernetes meaning a
Person in Control, more like a Man on the Steering for a long drive.

6. Cyber Crime
The Thieves are now in White-Collar
❖ As earlier defined, a Crime is any unruly behaviour
that is punishable by Law.
❖ A Cyber Crime could be defined as any unruly or
unauthorised or malicious act that could lead to
undue Disclosure, Modification, Destruction or
theft of Critical Information Assets while working
on The Cybernetic Elements.
❖ The Cyber Criminals mostly leverage on a Common
ground to trigger-The Internet World Wide
Web(www).

7. The Prevalent Losses To Cyber Crimes
1. IBM 2021
Data
Breach
Report
10% $1.07m 11
Increase in
average total cost
of a breach,
2020-2021
$1.07m 11 Increase in average
total cost of a breach, 2020-2021
Cost difference where remote
work was a factor in causing the
breach
11 Increase in average
total cost of a breach,
2020-2021 Cost
difference where remote
work was a factor in
causing the breach
Consecutive years
healthcare had the
highest industry cost of a
breach
2. Nigeria has
recorded$6
trillion to Cyber
Crime in 10
years.
In2020, there was
global loss of $170
Billion and
$400Billion is
envisaged in 2027.
$200 billion loss
reported by
Nigerian banks
as at 2019

9. Other Prevalent Top Cyber Crimes
❖ Social Engineering Attacks
❖ Business Email Compromise
❖ Social Media
❖ Insiders
❖ Mobile Security Threats
❖ Ransomware
❖ Denial of Service
❖ Man-in-The Middle Attacks
❖ Others

10. Cyber Security
The Concept of The CIA Triad
❖ The Process or act of protecting your Cybernetic Elements from
Undue Disclosure, Modification and Destruction.
❖ The Process or act of protecting our Cybernetic Elements based on
the acceptable level of Confidentiality, Integrity and
Availability-The CIA Triad.
❖ The CIA Triad is generally seen as the philosophy of Cyber Security:
➢ Confidentiality- The act of protecting the Cybernetic
elements from unauthorised Disclosure
➢ Integrity- The act of protecting the Cybernetic elements from
unauthorised Modification.
➢ Availability- The act of protecting the Cybernetic Elements
from unauthorised Destruction.
The other
side of the
coin
D
i
s
c
l
o
s
u
r
e
D
e
s
t
r
u
c
t
i
o
n
Modification

11. The Philosophy of Cyber Security
The philosophy of Cyber Security can be
categorised into three Layers:
1. The Focused or Objective Layer- Achieving an
Acceptable level of: Confidentiality, Integrity and
Availability(CIA Triad).
2. The Three Control Types: Administrative,
Technical and Physical.
3. The Seven Security Measures, Safeguards or
Countermeasures: Preventive, Detective,
Deterrent, Corrective, Recovery, Compensative
and Directive.
CIA Triad
Admin Tech Physical
Prevent, Detect, Deter, Correct,
Recover, Compensate, Direct

12. Proactive & Practical Approach to Combating Cyber Crimes
https:/
/de.slideshare.net/Chinatu
Identification
M
o
n
i
t
o
r
P
r
o
te
c
ti
o
n
D
e
t
e
r
m
i
n
e
Classification
Combating
Cyber Crimes

13. Final Points
1. Your primary obligation is to support and
meet your Organisation’s Business goals
and Objectives.
2. You must understand the Business
Processes of your organisation.
3. You must embrace the concept of the CIA
Triad as your ultimate responsibility.
4. You must be able to categorise your
Business functions as they are applied into
Administrative, Technical and Physical.
5. You must understand when to apply the 7
measures of Control and be able to tie
each to the respective Control Types.
6. You must ensure that the cost of Control
Measures is not higher than the value of
Asset you are applying the control on.
7. You must embrace multi-layered security. You
cannot go wrong with Defense in depth.
8. You must ensure the culture of Security is
driven and supported from The Top
Management.
9. You must carry all stakeholders and the
Business Unit Heads along while assessing Risk.
10. You cannot go wrong with Frameworks,
Standards and Best Practices.
11. Carry your organisation along through
Awareness training and other Security initiatives.
12. Cyber Security is everyone’s Business, get
involved.

14. International Frameworks
and Standards
❖ https://www.iso.org/isoiec-27001-information-
security.html
❖ https://csrc.nist.gov/Projects/risk-management
/sp800-53-controls/
❖ https://www.pcisecuritystandards.org/pci_secu
rity/
❖ https://www2.ed.gov/policy/gen/guid/fpco/fer
pa/index.html
❖ https://www.cisa.gov/federal-information-secu
rity-modernization-act
❖ https://www.ftc.gov/tips-advice/business-cent
er/privacy-and-security/gramm-leach-bliley-act
❖ https://www.hhs.gov/hipaa/index.html

15. Nigerian Cyber Security
Frameworks and Initiatives
1. National CyberSecurity Policy and
Strategy-NCPS.
https://education.gov.ng/national-cybersec
urity-policy-and-strategy-2021/#1
2. Nigeria Data Protection Regulation-NDPR.
https://nitda.gov.ng/wp-content/uploads/20
21/01/NDPR-Implementation-Framework.p
df
3. Other Frameworks and Regulatory ACTs
from NCC, CBN and others.

16. The level of Protection you apply on
any Asset is determined by the Value
you place on the Asset.

17. “Together we can Combat Cyber Crimes”

18. Thanks!
Contact us:
RoseTech CyberCrime Solutions Ltd.
rosetechCyberSol@gmail.com
www.rtechccsl.com
+2348037815577
https://www.linkedin.com/in/chinatu-uzue
gbu-67593119/