Data Security @ the personal level

personal security briefing to employees (e.g for ISO 27001 compliance)

Transcript

1. Data Security 
 (@ the personal level) Arnon Rotem-Gal-Oz
2. So what’s so important about “information security”?
3. Security is a real problem www.informationisbeautiful.net/visualizations/worlds-biggest-data-breaches-hacks/
4. Information security? 
 Not MY problem - IT should figure it out
5. We’ve met the enemy and he is us
6. • Hardware • Software • People • Procedur es • Data
7. Formal threat analysis 
 The STRIDE model 
 
 
 Also see • OWASP https://www.owasp.org/ • https://www.owasp.org/index.php/Threat_Risk_Modeling#STRIDE • Common Criteria https://www.commoncriteriaportal.org/
8. Spoofing (of user identity) 
 Tampering 
 Repudiation 
 Information disclosure 
 Denial of service 
 Elevation of privilege
11. On the other hand…
14. Passwords
16. 2016 is just 
 
 as bad
19. Physical theft/loss
20. Protect your assets
21. Pay attention to email/text recipient address
22. Malware
23. It is up to 
 you!
24. •Be mindful •Be careful who you trust •Secure your devices •Report problems