1. Information Security Casebook
Your Name

2. Objectives At the end of this session you will be able to:
Identify the main risks that occur when the security of our information is compromised
Recognise your personal responsibility for the security of information and what this means in practical terms 2

3. Which of these is correct?
Information security has got nothing to do with data protection law.
Information security is essential to comply with data protection law but covers much more.
Information security is just another term for complying with data protection law.

4. Confidential Information

5. Potential Threats Theft and Malicious Activity
Leakage of Information
Corruption of Information and Systems

6. Possible Consequences
Lose Money
Damage to Reputation
Complaints generated
Fines or other sanctions

7. The Cases Case 1 Case 4 Case 7 Case 8 Case 5 Case 2 Case 3 Case 6

8. Objectives At the end of this session you will be able to:
Identify the main risks that occur when the security of our information is compromised
Recognise your personal responsibility for the security of information and what this means in practical terms 8

9. Case 1: Identity Cards What must you do if you forget your card?
Should you challenge your colleague?

10. Case 2: Passwords
Colleague forgets password
Password guidelines

11. Case3: Desk Security
Computer
Confidential papers

12. Case 4: Telephone Call How do you know who you are talking to?
Does an identity check matter if you are making the call?

13. Card 5: Payment Cards
Taking payment details
Recording payment details

14. Case 6: E Mail Attachment
Unexpected
Unexpected attachment

15. Case 7: Homework? Confidential Project
Wants to e mail work to home computer

16. Case 8: Company Laptop
Takes laptop home
Leaves it in parked car

17. Case 9: Loose Talk
Social gathering
Is it alright to talk about work?