rojie valderrama
our first gmeet in IAS101(INFORMATION ASSURANCE SECURITY)
10 topic
1.what is information security
-The quality or state of being secure to be free from danger
-Security is achieved using several strategies
-Security is achieved using several strategies simultaneously or
used in combination with one another
-Security is recognized as essential to protect vital processes
-Security is not something you buy, it is something you do
2.Information is an asset which,
like other
important business assets, has value to
an organization and consequently needs
to be suitably protected
- •Business Continuity Management- To reduce
disruption caused by disasters and security failures to an
acceptable level.
•Compliance - To avoid breaches of any criminal and
civil law, statutory, regulatory or contractual obligations
and of any security requirements
4.INFORMATION SECURITY
. Protects information from a range of threats - Ensures business continuity
- Minimizes financial loss
4.Optimizes return on investments - Increases business opportunities
5.Threats
-Employees
-External Parties
-Low awareness of security issues
-Growth in networking and distributed computing
-Growth in complexity and effectiveness of hacking tools and
viruses
-Natural Disasters eg. fire, flood, earthquake
6.-What is Information?
-What is Information Security?
-What is RISK?
-An Introduction to ISO for information
technology
-User Responsibilities
7.INFORMATION CAN BE
-Created
-Stored
-Destroyed
-Processed
-Transmitted
-Used - (For proper & improper purposes)
-Corrupted
-Lost
-Stolen
8.Threat Identification
Elements of threats
Agent : The catalyst that performs the
threat.
-Human
-Machine
-Nature
9.Threat Identification
Elements of threats
Motive : Something that causes the agent
to act.
Accidental
Intentional
Only motivating factor that can be both
accidental and intentional is human
- people 'who we are'
People who use or interact with the
Information include:
Share Holders / Owners
Management
Employees
Business Partners
Service providers
Contractors
Customers / Clients
Regulators etc.
