1. INFORMATION SECURITY GOVERNANCE (ISG) Relates to the security of information systems Is an element of corporate governance

2. INFORMATION SECURITY GOVERNANCE (ISG) Should be a part of the internal controls and policies that constitute corporate governance –To accomplish the goal of making information security, an integral part of core business operations –To secure the information assets

3. MAJOR ELEMENTS OF THE ISG FRAMEWORK Organizational Responsibilities and Authority –Describes the ISG responsibilities and functions Of each member of an organization, including the Board of Directors/Trustees, Senior Executive, Executive Team Members, Senior Managers and all employees. –Each has a significant role to play in ISG.

4. MAJOR ELEMENTS OF THE ISG FRAMEWORK Information Security Program Components –Describe the essential components of an information security program with detailed guidance specified in the security practices of ISO/IEC 17799. This includes assessment, policies and procedures, training, testing, remediation of risks, detection and response to incidents and business continuity planning.

5. MAJOR ELEMENTS OF THE ISG FRAMEWORK Reporting and Independent Evaluation Recommendations –Describe the contents, frequency and audience for reporting to satisfy governance oversight requirements. –Each independent organizational unit should assess, remediate, and report on its information security program

6. MAJOR ELEMENTS OF THE ISG FRAMEWORK Reporting and Independent Evaluation Recommendations –Annually, an independent information security program evaluation should be completed based on generally accepted auditing standards the results should be reported to the Board of Directors/Trustees

7. Benefits of Implementing the ISG Framework Facilitates compliance with applicable legislative, regulatory and contractual requirements.

8. Benefits of Implementing the ISG Framework Additional tangible business benefits- –Improved internal processes and controls Authentication, authorization and auditability of the people, devices and applications on the network improves efficiency and effectiveness of business processes. –Potential to reduce cost of audit and insurance Through better governance and the ability to demonstrate an auditable, complete ISG program

9. Benefits of Implementing the ISG Framework Additional tangible business benefits- –Market differentiation through a continuous improvement process This is a method for improving productivity and customer loyalty. Ultimately, quality becomes a market differentiator. In course of time, an ISG program may also provide results to help determine a market leader.

10. Benefits of Implementing the ISG Framework Additional tangible business benefits- –Self-governance as a better alternative to regulation Implementation of an industry-led solution based on open standards and best practices would help mitigate the requirement for new governmental regulation. Should new legislations emerge, organizations that have invested in an ISG program are likely to benefit

11. CYBER SECURITY GOVERNMENT REGULATIONS REGULATIONS BY CIOs & IT DEPARTMENTS COMPUTER FORENSICS – Application of Computer investigation and analysis techniques