1. Cybersecurity and Information Assurance
Mr Joseph Pindar and
Dr Jonathan Rigelsford
The University of Sheffield
By:
Arwa Ashoor

2. Outline: Introduction The Enterprise and Cybersecurity
Improving the Operational Effectiveness
Strategic Advantage
Implementing a Cybersecurity Programme

3. five key subjects:
Strategic Alignment: How Cybersecurity and Information Assurance interface with other areas of the enterprise is critical to success.
Communication: The importance of effectively communicating the value of Cybersecurity value throughout the enterprise.
Cloud Computing: What is it and how does it impact Cybersecurity and Information Assurance.
Risk Management: Specifically the lack of objective data and the difference in approach compared to other risk management organizations.
Certification: The increased requirement of certification.
See Cybersecurity and Information Assurance for what they are: mainly a cost
of doing business with the unique opportunity to create significant value by
enabling the enterprise to enter markets and use technology that competitors
fear.

4. What is Information Assurance and Cybersecurity?
Information Assurance is considers to be a subset of Cybersecurity
Information Assurance: Is the confidence that information systems will protect the information they handle and will function as they need to, when they need to, under the control of legitimate users. For example: hard-copy document storage and transportation.
Cybersecurity: Defending against attacks on computer systems; including control systems. For example: those in electricity generation and distribution networks

5. The Enterprise and Cybersecurity
In this section they discuss Porter and Carr’s contributions to understanding the role of operational effectiveness and strategy in the enterprise.
1- Operational Effectiveness and Strategy
2- Carr’s view
3- Competitive Advantage
In this section we discuss Porter and Carr’s contributions to understanding the role of operational
effectiveness and strategy in the enterprise
The main strategic benefit of Information Assurance and Cybersecurity is to ensure continued safe and compliant operation of the enterprise whilst adopting new technologies and techniques.

6. Operational Effectiveness and Strategy:
Porter defines operational effectiveness as “performing similar activities better than rivals perform them” and that’s mean :
Offering lower cost and superior quality at the same time.
Improvements in methods raise the level of competition

7. Carr’s view of IT and Risk Frontier
IA and Cybersecurity mainly contribute to the OE of the enterprise in a similar way to Carr’s view of IT
predicted

8. Competitive Advantage:
Information Assurance and Cybersecurity can boost profitability by aligning to enterprise strategy.
If implemented badly can damage profits
Deliver outcomes to the enterprise’s customer.
A good example of Information Assurance and Cybersecurity delivering outcomes to enterprise
customers is Amazon Web Services (AWS).

9. Improving the Operational Effectiveness :
How improving operation effectiveness lead to reduce the enterprise costs and increase profitability.
Antivirus Cost
Metrics
A final challenge when seeking to gain security certification is that occasionally mandated controls cannot be applied. Health and Safety is more important than either Information Assurance or Cybersecurity thus can prevent the implementation of security controls as prescribed by securitystandards

10. Strategic Advantage: Risk Management Communicating Cybersecurity
Analytics
In this section the Understanding the different type of risk will create operation value for the enterprise. They two definitions of risk are :
_______________
Information Assurance and Cybersecurity professionals should engaging with other areas of the enterprise in order to make correct decision and collect budget and educated on the dangers of the Internet .For this reason the communication point was is covered in this part
__________________
Chinese symbol of risk

12. Implementing a Cybersecurity Programme :
The Cisco security programme enhances the business by offering both cost efficient processes to gain operational effectiveness and strategic opportunities to create value.
The(CEO) chooses the enterprise strategy and makes business decisions in line with that strategy.
The(CSO) reports to the CEO and has the role of explaining the security risks of specific business decisions.

13. Thank you