7th Kuwait Info Security Forum 2015

1. Security Threats & Gaps in Kuwait
May-2015
Naveed Ahmed

2. - What is the current threat landscape in Kuwait
- How are the companies and businesses addressing
these threats
- How are Security Solutions Provider companies
locally addressing these threats
Agenda

4. Lockheed USAF F22
US Department of Defence 2009:
“China Needs Over 16 Years to
Catch Up”
3 years later …
Chengdu J-20
Have they been Breached?

5. Natanz, Iran & Stuxnet

7. Digital Wildfires
The global risk of massive digital misinformation
sits at the centre of a constellation of
technological and geopolitical risks ranging from
terrorism to cyber attacks and the failure of
global governance. This risk case examines how
hyperconnectivity could enable “digital wildfires”
to wreak havoc in the real world. It considers the
challenge presented by the misuse of an open
and easily accessible system and the greater
danger of misguided attempts to prevent such
outcomes.

8. Egypt Influence Network

11. Global Risks – 2015
World Economic forum

12. Global Risks Landscape 2015 (WEF)

13. 10 Global Risks, Likelihood & Impact

14. Evolving Risk Landscape: Likelihood

15. Evolving Risk Landscape: Impact

16. Technological Risks of Highest Concern

17. Description of Technological Risks

18. The Changing Technological Risks
Landscape

19. The Global Information Technology
Report – 2015
World Economic Forum

20. Digital Content and Services

30. ArabianITS Security Portfolio
6: Application Software Security
7: Wireless Access Control
8: Data Recovery Capability
5: Malware Defenses
4: Continuous Vulnerability
Assessment and Remediation
3: Secure Configurations for
Hardware and Software
2: Inventory of Authorized and
Unauthorized Software
1: Inventory of Authorized and
Unauthorized Devices
9: Security Skills Assessment and
Appropriate Training to Fill Gaps
10: Secure Configurations for Network
Devices
11: Limitation and Control of Network
Ports
12: Controlled Use of Administrative
Privileges
13: Boundary Defense
15: Controlled Access Based on the
Need to Know
14: Maintenance, Monitoring, and
Analysis of Audit Logs
16: Account Monitoring and Control
17: Data Protection
18: Incident Response and
Management
19: Secure Network Engineering
20: Penetration Tests and Red Team
Exercises

31. ArabianITS Security Portfolio
6: Application Software Security
7: Wireless Access Control
8: Data Recovery Capability
5: Malware Defenses
4: Continuous Vulnerability
Assessment and Remediation
3: Secure Configurations for
Hardware and Software
2: Inventory of Authorized and
Unauthorized Software
1: Inventory of Authorized and
Unauthorized Devices
9: Security Skills Assessment and
Appropriate Training to Fill Gaps
10: Secure Configurations for Network
Devices
11: Limitation and Control of Network
Ports
12: Controlled Use of Administrative
Privileges
13: Boundary Defense
15: Controlled Access Based on the
Need to Know
14: Maintenance, Monitoring, and
Analysis of Audit Logs
16: Account Monitoring and Control
17: Data Protection
18: Incident Response and
Management
19: Secure Network Engineering
20: Penetration Tests and Red Team
Exercises

32. Thank You