Cybersecurity and Information Assurance Mr Joseph Pindar and Dr Jonathan Rigelsford The University of Sheffield By: Arwa Ashoor 200700427

Outline: Introduction The Enterprise and Cybersecurity Improving the Operational Effectiveness Strategic Advantage Implementing a Cybersecurity Programme

five key subjects: Strategic Alignment: How Cybersecurity and Information Assurance interface with other areas of the enterprise is critical to success. Communication: The importance of effectively communicating the value of Cybersecurity value throughout the enterprise. Cloud Computing: What is it and how does it impact Cybersecurity and Information Assurance. Risk Management: Specifically the lack of objective data and the difference in approach compared to other risk management organizations. Certification: The increased requirement of certification. See Cybersecurity and Information Assurance for what they are: mainly a cost of doing business with the unique opportunity to create significant value by enabling the enterprise to enter markets and use technology that competitors fear.

What is Information Assurance and Cybersecurity? Information Assurance is considers to be a subset of Cybersecurity Information Assurance: Is the confidence that information systems will protect the information they handle and will function as they need to, when they need to, under the control of legitimate users. For example: hard-copy document storage and transportation. Cybersecurity: Defending against attacks on computer systems; including control systems. For example: those in electricity generation and distribution networks

The Enterprise and Cybersecurity In this section they discuss Porter and Carr’s contributions to understanding the role of operational effectiveness and strategy in the enterprise. 1- Operational Effectiveness and Strategy 2- Carr’s view 3- Competitive Advantage In this section we discuss Porter and Carr’s contributions to understanding the role of operational effectiveness and strategy in the enterprise The main strategic benefit of Information Assurance and Cybersecurity is to ensure continued safe and compliant operation of the enterprise whilst adopting new technologies and techniques.

Operational Effectiveness and Strategy: Porter defines operational effectiveness as “performing similar activities better than rivals perform them” and that’s mean : Offering lower cost and superior quality at the same time. Improvements in methods raise the level of competition

Carr’s view of IT and Risk Frontier IA and Cybersecurity mainly contribute to the OE of the enterprise in a similar way to Carr’s view of IT predicted

Competitive Advantage: Information Assurance and Cybersecurity can boost profitability by aligning to enterprise strategy. If implemented badly can damage profits Deliver outcomes to the enterprise’s customer. A good example of Information Assurance and Cybersecurity delivering outcomes to enterprise customers is Amazon Web Services (AWS).

Improving the Operational Effectiveness : How improving operation effectiveness lead to reduce the enterprise costs and increase profitability. Antivirus Cost Metrics A final challenge when seeking to gain security certification is that occasionally mandated controls cannot be applied. Health and Safety is more important than either Information Assurance or Cybersecurity thus can prevent the implementation of security controls as prescribed by securitystandards

Strategic Advantage: Risk Management Communicating Cybersecurity Analytics In this section the Understanding the different type of risk will create operation value for the enterprise. They two definitions of risk are : _______________ Information Assurance and Cybersecurity professionals should engaging with other areas of the enterprise in order to make correct decision and collect budget and educated on the dangers of the Internet .For this reason the communication point was is covered in this part __________________ Chinese symbol of risk

Implementing a Cybersecurity Programme : The Cisco security programme enhances the business by offering both cost efficient processes to gain operational effectiveness and strategic opportunities to create value. The(CEO) chooses the enterprise strategy and makes business decisions in line with that strategy. The(CSO) reports to the CEO and has the role of explaining the security risks of specific business decisions.

Thank you