information security

information security maturity
1. the impact of this is the more organisations are in low-end information security model means taht more vulnerabilities that have in terms of business population
core principles
1. confidentiality
2. integriy
3. accountability
4. assurance&privacy&availability
5. authenticity &non-repudiation
6. what can the organisation do by those principles
  1. highlights aspects of IS comes into AnO is not only about infrastructure ,it is something that is virtual,not easily seen.the principles are provisional good quality information for rights users in right time to make decisions and operate within the context of BE
quality , accessibility and usability are main concerns
wrong perception of IS within the organisation will be the weakest point of the chain at the beginning
why it is important ? why does it need to be secured in context of business
1. IS is not meant to slow don a company but rather to enhance and facilitate safer growth.
2. it can improve organisational performance that reduce the cost,lower overhead only if organisations make the right. reduce the risk requires clear and demonstrated governance, achievable IS strategy, dedicated budget,planning and projects that deliver.it can help organisation project images that have impacts on both customers and business
it is used in at least two sense: condition & safeguards
1. condition in which harm does not arise despite the occurrence of threat
2. safeguards whose purpose is to achieve that condition
Divers
1. internal drives : increase needs to provide services regardless of location and type of end-user and increase consumer complaints about misuse of personal and confidential information.
2. external drivers: increase legal liability for lack of due care in the protection of personal information and legislative and regulatory compliance requirements
benefits it enables confidence and assurance and the protection of business assets and the fulfillment of the organisation's mission and vision
the things or aspects that business manager will care
1. Vicarious liability
  1. senior officers can be held criminally liable for the lack of due care and due diligence
Control
1. control types
  1. Detrrent
  2. preventive
  3. detective
  4. corrective
  5. recovery
  6. compensating
2. Due care(establishment of control)
3. Control categories
  1. physical
  2. Technical
  3. operational
  4. administrative
4. Due diligence(maintenance of control)
  1. differences between those two and those implications
    1. due care shows that organisation has taken responsibilities for activities that take place and protect the organisation and its resources and employees from the potential threats.
    2. due diligence is implementing the control and ensuring the controls are monitored and updated all the time
    3. implications: if the company does not practice those two pertaining to the security of its assets and can be legally charged with negligence and held accountable for any ramifications of that negligence
a shift in security perspecitves
1. information security is more than just technology; poor information security are usually the result of poor management rather than poor technical controls

Nächster

information security

Beschreibung

Zusammenfassung der Ressource

Medienanhänge

ähnlicher Inhalt

	Erstellt von virusqin2357 vor etwa 10 Jahre