ROB PROW MIPI/MCMI ALTERNATIVE SOLUTIONS LIMITED INFORMATION SECURITY ROB PROW MIPI/MCMI ALTERNATIVE SOLUTIONS LIMITED

Quote “All things appear and disappear because of the concurrence of causes and conditions. Nothing ever exists entirely alone; everything is in relation to everything else” Buddha

Information Security is a Global Issue Affecting:- International Trading Electronic commerce Electronic Communications and transactions National and global infrastructures And importantly your organisation!

Information Security Risk & Threat Does your organisation really understand what the risks are? Vulnerabilities of your information assets? Vulnerabilities of your Business processes? Assurance of information integrity, availability and confidentiality? Vulnerabilities of your information when processed, managed or exchanged between business partners?

Governance External:- Regulation (GFSC – Security Thematics) Financial Intelligence Service (FIS) Data Protection Internal:- Ability to inspire confidence to provide market assurance Preserve confidentiality, integrity and availability of information

Information Security Management System (ISMS) Reason & Purpose “Nothing ever exists entirely alone” Information integrity is protected within a management chain of controls That chain is only as strong as its weakest link A need to manage exposure to security risk

Information Security Management System (ISMS) An ISMS Provides:- Effective measurement of risk, threats and vulnerabilities Embeds a management regime with regard to risk, decision making and controls Ensures policy, procedure and best practice is implemented Engenders an organisational security culture (Awareness programme/training)

Information Security Management System (ISMS) Network Security (Inc. communications and operations) Manages information handling, exchange & encryption Measures effectiveness, monitoring/audit and ensures continual improvement Manages incidents (reporting & investigation) Provides preparedness (DR & Business Continuity)

Solutions You are the experts in your field and within your organisation & best placed to understand security risks With the right tools & management systems you are best placed to assess those risks There are a myriad of technical solutions and security advice available to protect your systems Solutions need to be measured in accordance with that risk, be pragmatic, affordable but effective & holistic Solutions need to be embedded within organisational culture

Threat & Risk Treatment QUOTE “Don’t go backwards, you’ve already been there” Ray Charles