1. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL© COPYRIGHTMARS INCORPORATED | CONFIDENTIAL
“My Greatest Learning and Greatest
Achievement from the Summer
Internship at Mars Global Services”.
By: Mackenzie Starcevich

2. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL
Agenda
2
Introduction
What I Learned About Mars
What I Learned From My Role
–Examples of projects completed during my internship
What I Learned About Myself
Conclusion

3. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL
Introduction
3
Name: Mackenzie Starcevich
School: University of Saint Francis
Studying: Business Administration w/
specialty in Risk Management
Job title: MIS Security Intern

4. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL
What I Learned About Mars Inc.
4
 Importance of Five Principles to Mars
Inc.
–They are thought about before making any
type of decision
–Each one is actively demonstrated everyday
• Ex. Efficiency- the recycling system that is all
around MGI
 It is a positive work culture
–Always smiling
–People were friendly and approachable
 Associates have a zig zag career path at
Mars
–You will not be doing the same exact thing
your whole life
–Broaden your experiences within the
company itself
 Candy is EVERYWHERE

5. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL
What I Learned About My Position
5
 IT security is important for the
company’s success
 Being on a global team is not
always easy
–For example, trying to schedule
meetings with people from out of
the country.
 Tasks were different everyday
–Projects will show the broad
spectrum of work
 Team collaboration is important
–Learned that from our weekly
governance calls

6. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL
Information Security Program Pillars
6
Security Program Pillars
Data Protection RMS instructions
Cyber Monitoring Look-a-Like Domain Testing
Traditional Security
• Risk Form Review
• Risk Acceptance Form
• Risk Calculation Research
• Risk Reporting in Service Now
Governance
• Cyber Security Trends-Audit Committee
Deck
• Bubble Chart Definition Deck- MIS LT Deck

7. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL
Example of Governance: Bubble Chart Explanation
7

8. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL
Identify
Activities that help
understand the
business & risk
implications of a
cybersecurity breach
Protect
Proactive safeguards to
minimize the potential
for user, information,
or network
compromise or breach
Detect
Activities that enable
detection of user,
information, or
network compromise
or breach
Respond
Activities that capture
and contain the
anomaly to enable
analysis & mitigation
Recover
Activities that enable
recovery and return to
normal business
operations
Example of Traditional Security: National Institute of Standards & Technology
(NIST) Cyber-Security Framework Functions
 Asset
Management
 Business
Environment
 Governance
 Risk
Assessment
 Risk
Management
Strategy
 Access Control
 Risk Awareness /
Training
 Maintenance
 Protective
Technology
 Information
Protection
Processes
 Anomalies &
Events
 Security
Continuous
Monitoring
 Detection
Processes
 Responsibility
Planning
 Communications
 Analysis
 Mitigation
 Improvements
 Recovery
Planning
 Improvements
 Communications

9. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL
Examples of Traditional Security- Risk Calculation Research
9

10. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL
Cyber Crime
Monetization of Data
• Social Engineering
• Extortion
• Strategic Data Integrity Attack
Primary Risk Areas Effected:
• IP, Sensitive Data Loss
• PII Loss
• Fraud
• Credit Card Data Loss
Insider Threat
Monetization of Data or Espionage
• Privilege abuse
• Misuse of data
• Collusion between insider and outsider
Primary Risk Areas Effected:
• IP, Sensitive Data Loss
• Fraud
• PII Loss
• Credit Card Data Loss
Hacktivism
Decrease in traditional web defacement
and denial of service attacks.
Increase in destructive attacks exposing:
• Incriminating information
• Questionable corporate practices
• 3P and Govt. relationships
Primary Risk Areas Effected:
• Corporate Brand Reputation
Internet of Things
Internet connected physical objects such
as home appliances, fitbits, cars
• Privacy concerns
• Connection to corporate networks
• Physical safety concerns
Primary Risk Areas Effected:
• IP, Sensitive Data Loss
• Disruption to IT Infrastructure
Cyber Espionage
Energy, Healthcare sectors and critical
infrastructure remain attractive targets.
Increased use of non sophisticated attacks
to conduct espionage campaigns.
Primary Risk Areas Effected:
• IP, Sensitive Data Loss
• Corporate Brand Reputation
Security Industry Trends
10
Critical Infrastructure
Increase in the number of industrial control
system (ICS) device vulnerability disclosures.
Targets broadening beyond defense industry
and governments to include energy, oil, mining,
healthcare.
Primary Risk Areas Effected:
• Disruption to Plant Industrial Controls
• Corporate Brand Reputation

11. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL
Example of Cyber Monitoring: Domain Look-a-likes
11

12. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL12
*ExampleofDataProtection:RMSInstructions

13. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL
Examples of Traditional Security- Risk Reporting
13
Estimatedcostofremediationtoassetlayers

14. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL
What I Learned About Myself
14
 Enjoy working in a team setting
 IT is more interesting to me than I thought it would be
 Mars is a company that I would love to work for in the future

15. © COPYRIGHTMARS INCORPORATED | CONFIDENTIAL© COPYRIGHTMARS INCORPORATED | CONFIDENTIAL
Thank you!