Presentation Title 12/July/2012

Slide Separator Sub title

Introduction Bachelors in Computer Science (University of Vladimir Polytechnic Institute, The Soviet Union) Masters in Computer Science 1993 – Started my career in Bank of Uganda as a systems analyst 1995 to Joined Pan World Insurance Co, from, as Computer Services Manager 1998 – July Joined Shell International B.V. in July, where I spent 12 years – IT Manager for Shell Uganda Ltd December Became a CISM 2005 – Information Security Manager for Shell operations in Africa, working out of Cape Town, South Africa 2008 to Business Services Manager – Strategy & Compliance, working at the Shell headquarters, in the Hague, the Netherlands

Referece from ISO IEC Define Information Security 2.Why Information Security is needed 3.How to establish security requirements 4.Assessing security risks 5.Selecting controls 6.Critical success factors 7.Organisational security a.Make an active commitment to information security. (Managing IS in an organization) b.Management IS Forum c.Coordinate information security implementation. d.Allocate information security responsibilities and authorities. e.Establish an authorization process for new facilities. f.Use confidentiality agreements to protect your information. g.Specialist Information Security advice h.Maintain relationships with other organizations. i.Maintain relationships with your special interest groups. j.Perform independent information system reviews.

Roadmap for Information Security Framework in MDAs