assignment

rojie valderrama
our first gmeet in IAS101(INFORMATION ASSURANCE SECURITY)

10 topic
1.what is information security
-The quality or state of being secure to be free from danger
-Security is achieved using several strategies
-Security is achieved using several strategies simultaneously or
used in combination with one another
-Security is recognized as essential to protect vital processes
-Security is not something you buy, it is something you do
2.Information is an asset which,
like other
important business assets, has value to
an organization and consequently needs
to be suitably protected

1. •Business Continuity Management- To reduce
   disruption caused by disasters and security failures to an
   acceptable level.
   •Compliance - To avoid breaches of any criminal and
   civil law, statutory, regulatory or contractual obligations
   and of any security requirements
   4.INFORMATION SECURITY
   . Protects information from a range of threats
2. Ensures business continuity
3. Minimizes financial loss
   4.Optimizes return on investments
4. Increases business opportunities

5.Threats
-Employees
-External Parties
-Low awareness of security issues
-Growth in networking and distributed computing
-Growth in complexity and effectiveness of hacking tools and
viruses
-Natural Disasters eg. fire, flood, earthquake
6.-What is Information?
-What is Information Security?
-What is RISK?
-An Introduction to ISO for information
technology
-User Responsibilities
7.INFORMATION CAN BE
-Created
-Stored
-Destroyed
-Processed
-Transmitted
-Used - (For proper & improper purposes)
-Corrupted
-Lost
-Stolen
8.Threat Identification
Elements of threats
Agent : The catalyst that performs the
threat.
-Human
-Machine
-Nature
9.Threat Identification
Elements of threats
Motive : Something that causes the agent
to act.
Accidental
Intentional
Only motivating factor that can be both
accidental and intentional is human

1. people 'who we are'
   People who use or interact with the
   Information include:
   Share Holders / Owners
   Management
   Employees
   Business Partners
   Service providers
   Contractors
   Customers / Clients
   Regulators etc.