1. No Such Agency in the Cloud… Amanda Goodger 11 Sept 2011

2. Tomorrow’s World is here… NOW!!!!!!

3. Today’s Session Content: My Background My MSc Experience – Dissertation Today’s World… that thing called CLOUD! Social and Business Assurance… Tomorrow’s World – New concept… Have we answered the exam statement?

4. INFORMATION JOURNEY… … CONTINUATION OF PREVIOUS DISCUSSIONS EG DIETER, KERRY…

5. My Background Hybrid Background… ◦Maths & Education ◦MBA ◦MSc – Information Security Work Experience… ◦Private Sector ◦Public Sector Social Experience – why add this?????

6. My MSc Experience – Dissertation Tips & Tricks Structure ‘V’ Model Approach Research Methodology Critical Analysis My topic …. ◦Assurance Cases – New Approach for Critical National Infrastructure Assessments

7. Dissertation Overview Background – Interconnected Environment… Rationale for CLAIMS-ARGUMENT-EVIDENCE (CAE) notation – Legal Analogy Vulnerability Assessment Lifecycle – Assurance Cases Recommendations: ◦Patterns – ‘Mesh’ Case ◦Resilience Framework using Hypercompetition Model ◦Future Thinking…

8. Today’s World… Move from Fortress to Data Centric World…

9. Cloud Computing Phenomenon…

10. Why is this a problem – complexity? Or is wicked?

11. Example of how an information supply chain can change over time… this is only the beginning!

12. First Walkthrough (if not understood not matter)… this is where we are now & will be from now on…

13. Second Walkthrough (if not understood not matter just to show how complexity grows!)… this is where we are now & will be from now on…

14. Social and Business Assurance… Harmonisation of the Information Standards… Common Assurance Maturity Model… Issues across the ISG weekend… ◦HDF ◦Trust ◦Assurance ◦Critical Information Infrastructure ◦……………………….

15. Tomorrow’s World… New Concept Information Lodestone… ◦Why is this relevant to information security? Concept… ◦Understanding ◦Protecting ◦Sustaining ◦Nurturing Tomorrow’s World = Information World!!!!

16. Information World – ‘bridge and beyond…’ Why this? Why think differently? What is the relevance for you? Does it mean anything to you? So what…

17. TOMORROW’S WORLD… NOW!!!!!!!! Hybrid thinking… Integrated Information / Knowledge World… Cyber-surete not = command and control… NOW = TRUST + ASSURANCE + INFLUENCE DATA CENTRIC WORLD – INFORMATION LODESTONE…. Integrated Information Society Hub…

18. CONCEPT LAUNCH… RSA EUROPE… 10-13 0CTOBER 2011 via CSA EUROPE … Exact date to be confirmed…

19. Exam question answered! Thanks for listening… Amanda.Goodger@cloud-security.org.uk