1. OSR/Aug 02 Data Security E2002, Lecture 1 August 30, 2002 000-015 History Background - Batch - Remote access, DB, RACF - Orange Book - ITSec, Common Criteria - Code of Practice - BS 7799, ISO 17799 - ISO TR 13335 - DS 484

2. OSR/Aug 02

25. 015-030 What is Information Security ? Why do we need Information Security ? - Commercial Image - Loss of Reputation, Trust, Confidence Examples

26. OSR/Aug 02

29. Trust

35. 030-090 Security Requirements - Risk Assessment ¤ Exercise: Five most serious threats ¤ KPMG Security Survey ¤ Traffic Light Analysis ¤ Risk Model ¤ Vulnerability Analysis Threats – BSI List - Legal Requirements ¤ FSR Vejl. 14 + 17 ¤ SysTrust - Good Practice

36. OSR/Aug 02

40. Exercise Which are the five most serious IT- security threats to an organization ?

41. OSR/Aug 02

79. Risk model Vulnerability Impact Threat

80. OSR/Aug 02 Legal, statutory, regulatory and contractual requirements

81. OSR/Aug 02

88. Principles and objectives  Vision  Ethical  Good Practice  IT Security Policy

89. OSR/Aug 02 090-105 Controls - Preventive - Detective - Corrective 105-135 Critical Success Factors - Examples

90. OSR/Aug 02

94. Trafiklysanalyse

95. OSR/Aug 02