1. Information Security

2. Security The CIA Triad Confidentiality Integrity Availability
The state of being secret
Security
Integrity
Availability
The state or quality of being entire or complete
Present and ready for use

3. The Job

4. Agenda
Some Threats
Some Controls

5. San Francisco – Terry Childs

6. UBS – Roger Duronio

7. Certegy Check Services

8. Lost Backup Tapes

9. Australia – Vitek Boden
This file is licensed under the Creative Commons Attribution-Share Alike 2.5 Generic license
“…marine life died, the creek water turned black and the stench was unbearable for residents…”
- Australian EPA

10. California – Mario Azar

11. Google and China

12. Waheed Mahmood

13. Lost Laptop

14. Scottish Council Loses Pay Details

15. Customer Information in Bins

16. The Biggie …

18. SMART

19. Where is Security?
IT Security?
Information Security?
Physical Security?
Business Security? Business Assurance?

20. Some Problems IT Vendors People – IT, employees, others … Complexity
Technology
Control Systems
Anyone who thinks that I am responsible for Information Security

21. Agenda
Some Problems
Some Solutions

22. Accept Challenges Display Your Badge Assess Risks
Security Golden Rules
Accept Challenges
Display Your Badge
Assess Risks
Protect Your Identity
Thirty Minute Rule
- 22 -

23. Security Program Risk Management Policy … Standards
Business Engagement
Culture / Behaviour Change
Security Architecture
Metrics and Measurements
Management System
Money / Staff
Controls

24. Further Reading
Bruce Schneier
SANS Internet Storm Centre / Newsbites
SecurityFocus
Titan Rain
Advanced Persistent Threat
Jericho Forum

25. Questions ?

26. Reading List
Ross Anderson: Security Engineering
Bruce Schneier: Secrets & Lies