Download as PPS, PPTX
Uploaded byCTE Solutions Inc.
Risk Management using ITSG-33
The document outlines the ITSG-33 security standards for risk management, detailing various aspects such as system development lifecycle, threat assessments, and security control objectives. It emphasizes the importance of continuous security assessment activities and categorization processes to ensure departmental security. For further information and training, the document references the resources provided by CTE Solutions and offers contact details for their offices.
More Related Content
Similar to Risk Management using ITSG-33
![[Bucharest] Attack is easy, let's talk defence](https://cdn.slidesharecdn.com/ss_thumbnails/attackiseasyletstalkdefencev3-151026104559-lva1-app6891-thumbnail.jpg?width=640&height=640&fit=bounds)
Risk Management using ITSG-33
- 1. Risk Management UsingITSG-33 Security Standards The Smarter Everyday project is owned and operated by CTE Solutions Inc. 1
- 2. ITSG-33 Overview Copyright 2014Intrinsec Security 2
- 3. ITSG Contents Copyright 2014Intrinsec Security 3
- 4. GC Risk Management Copyright2014 Intrinsec Security 4
- 5. System Lifecycle Copyright 2014Intrinsec Security 5
- 6. System Development Lifecycle When doesRisk Management get introduced in your department? Copyright 2014 Intrinsec Security 6
- 7. ITSG-33 Lifecycle Approach Copyright2014 Intrinsec Security 7
- 8. ITSG-33 Objectives Copyright 2014Intrinsec Security 8
- 9. Depar tmental ITSecurity Risk Copyright 2014 Intrinsec Security 9
- 10. Information System SecurityRisk Copyright 2014 Intrinsec Security 10
- 11. Establishing Depar tmental Security Copyright2014 Intrinsec Security 11
- 12. Defining Scope Copyright 2014Intrinsec Security 12
- 13. Identifying Security Needs Copyright2014 Intrinsec Security 13
- 14. Categorize the security Copyright2014 Intrinsec Security 14
- 15. TRA Methodology Copyright 2014Intrinsec Security 15
- 16. IT security threatassessment Copyright 2014 Intrinsec Security 16
- 17. ITSG Deliberate Threat Categories Copyright2014 Intrinsec Security 17
- 18. A note aboutThreat Assessments Copyright 2014 Intrinsec Security 18
- 19. Specify security controlobjectives Copyright 2014 Intrinsec Security 19
- 20. Develop departmental securitycontrol Copyright 2014 Intrinsec Security 20
- 21. Departmental security controlprofiles Copyright 2014 Intrinsec Security 21
- 22. Define business domains Copyright2014 Intrinsec Security 22
- 23. Define IT securityapproaches Copyright 2014 Intrinsec Security 23
- 24. Depar tmental securitycontrol profiles Copyright 2014 Intrinsec Security 24
- 25. Approve the securitycontrol profiles Copyright 2014 Intrinsec Security 25
- 26. Security Controls Copyright 2014Intrinsec Security 26
- 27. Continuous Assessment Activities Copyright2014 Intrinsec Security 27
- 28. Continuous Assessment Note • • SpecialNote regarding Continuous Assessment. Although some activities can be performed in realtime (e.g. Security Incident and Event Management (SIEM)), not all assessments need to be performed in real-time and can be performed manually (e.g. assessing backup procedures). Further reading? NIST 800-37: ISCM for Federal Information Systems and Organizations Copyright 2014 Intrinsec Security 28
- 29. Security Categorization Process Copyright2014 Intrinsec Security 29
- 30. Categorization Levels Copyright 2014Intrinsec Security 30
- 31. Security Categorization Steps Copyright2014 Intrinsec Security 31
- 32. Categorization Step One Copyright2014 Intrinsec Security 32
- 33. Categorization Step Two Copyright2014 Intrinsec Security 33
- 34. Categorization Step Three Copyright2014 Intrinsec Security 34
- 35. Categorization Step Four Copyright2014 Intrinsec Security 35
- 36. Conclusion • We have spentjust one hour on the ITSG-33 Security Guidance Documentation. • To access the ITSG-33 documentation, access: http://www.cse-cst.gc.ca/its-sti/publications/itsgcsti/index-eng.html • Intrinsec Training covers all 5 appendices and has extensive labs. For further ITSG-33 training information, speak with your CTE Solutions representative. Copyright 2014 Intrinsec Security 36
- 37. TECHNICAL Training with impact Microsoft VMware CloudComputing IT and Cyber Security CompTIA Java ProgrammingLanguages Novell UNIX MANAGEME BUSINESS Change Management TOGAF NT Enterprise Architecture ITIL COBiT Agile and Scrum Business Analysis Project Management 37 Communication Skills Leadership Skills Negotiation Skills Problem Solving Skills Facilitation Skills and many more…
- 38. CTE Solutions Inc.- Ottawa 11 Holland Avenue, Suite 100 Ottawa, Ontario, K1Y 4S1 Tel: (613) 798-5353 Toll Free: 1 (866) 635-5353 Fax: (613) 798-5574 CTE Solutions Inc. - Toronto 77 Bloor St. West, Suite 1406 Toronto, Ontario M5S 1M2 Tel: (416) 284-2700 Toll Free: 1 (866) 635-5353 Fax: (416) 284-6797 38