1. Recognising the Risks of Cyber Threats Across the Organisation John Thornton Secretary to the Digital Government Security Forum

2. Cyber Risks Findings from the recent DGSF study Managing and mitigating information and cyber security risks Agenda

3. South Korea

4. Israel

5. The Trust Multiplier

6. Digital-by –default Most transformation & cost saving programmes Smart buildings Utilities & infrastructure Intellectual property Personal data/privacy Integrity of contract negotiations Cyber Risks threaten

7. National level Operational Level Board & Senior Management Level Recognition of Cyber Risks

8. Target Audience Methodology About the Study

9. Understanding the Risks Language Threat Vectors Threat Actors Types of Attack Example Attack

10. Issues Arising Digital Enterprises Mobile Devices Cloud Computing Standards Legacy Systems Information Sharing Capacity & Skills

11. Emerging Best Practice

12. Governance Information Asset Registers Access & Monitoring Testing Sharing Threat Information Focus Emerging Best Practice

13. Conclusions Start by ensuring the foundations are in place and the organisation is secure Build on foundations developing culture, analytics & automated threat protection Use Security as an Enabler to make savings and improve efficiency - security should not be a barrier

14. To help: Suggested Review Process The Business Case Suggested Development Framework

17. Managing & Mitigating: Holistic approach Part of Corporate Risk Assessment & Management Processes Security-by-default Security as an ‘enabler’, not a barrier

18. Managing & Mitigating: Information Security has never been more: More Important More complex More All encompassing www.DigitalGovernmentSecurityForum.org