Cyber Security Overview Quiz

Cyber Security Overview

• Presented by Dr. Shrouk Hossam Eldien
• Course covers Cybersecurity & Information Security, focusing on different chapter topics.

Course Content

• Chapter 1: Cybersecurity & Information Security
• Chapter 2: Cyber Security Threats
• Chapter 3: Access Controls
• Chapter 4: Security Operations
• Chapter 5: Risk Identification, Monitoring, and Analysis
• Chapter 6: Incident Response and Recovery
• Chapter 7: Networks and Communications Security
• Chapter 8: Systems and Application Security
• Chapter 9: Operational Security
• Chapter 10: Security Best Practice
• Chapter 11: Cryptography

Information Security vs. Cybersecurity

• Information security (InfoSec) is broader, encompassing all aspects of protecting data, both physical and digital.
• Cybersecurity focuses specifically on digital assets, systems, and threats, a subset of information security. It primarily addresses electronic data storage, networks, and handling devices.

Threat Landscape

• Information Security: Considers a wider range, including physical threats (theft, unauthorized access, disasters).
• Cybersecurity: Exclusively concerned with digital threats (malware, hacking, data breaches, denial-of-service attacks, phishing).

Components

• Information Security: Includes access control policies.
• physical security (locks/alarms), disaster recovery, and policies for handling sensitive information in both digital and physical formats.
• Cybersecurity: Centers on technical controls like firewalls, intrusion detection/prevention, antivirus software, encryption, secure coding practices, and incident response to specific digital threats.

Emphasis on Network and Systems

• Information Security: Covers more than just networks and systems. It also includes policies related to document handling and storage
• Cybersecurity: Great emphasis on network and system security as these are primary attack vectors for digital threats. Protecting servers, endpoints, and infrastructure is important for cybersecurity.

Data Protection

• Information Security: Involves protecting data in all forms, including paper documents, hard drives, and physical records.
• Cybersecurity: Specifically focuses on protecting digital data (databases, files, communications) from access, theft, or alteration.

Goals of Information Security and Cyber Security

• Confidentiality: Protecting data from unauthorized disclosure, according to sensitivity and legal requirements, using access controls, file permissions, and encryption.
• Integrity: Ensuring information accuracy and completeness. This is crucial in preventing breaches and malicious activities, which can damage system availability and confidentiality. Use logging, digital signatures, hashes, encryption, and access controls to guarantee integrity.
• Availability: Ensuring timely and reliable access to systems and data by authorized users, crucial for functionality and productivity, via measures like backups, firewalls, and backup power supplies.

General Security Concepts

• Threat: Anything that could harm a computer system.
• Vulnerability: A defect in a system that allows an attack.
• Risk: Combination of vulnerabilities, assets, and threats.

Network, Operating System and Human Vulnerabilities

• Network Vulnerabilities: Insecure Wi-Fi, poorly configured firewalls.
• Operating System vulnerabilities: Default administrator accounts.
• Human vulnerabilities: The weakness of personnel in cybersecurity structures.

Information Security Policy

• Covers confidentiality, integrity, and availability, applicable to institutional data and systems.
• Defines institutional data as owned or licensed data.
• Defines information system as any electronic system storing, processing, or transmitting data.

Information Security Policy Policies

• Institutional data is protected throughout its lifecycle, considering sensitivity, value, and criticality.
• Information systems are secured appropriately based on the same criteria.
• Individuals accessing institutional data have associated roles and responsibilities.

Information Security Roles

• Users: Employees, contractors who have access to data and systems. Responsible for following policies, guidelines, procedures, reporting security breaches, and safeguarding institutional data.
• Data Agent
• Data Protector

Safeguarding Institutional Data (Specific User Responsbilities)

• Know your Data: Be mindful of the type of data. (Public, Private, Restricted)

• Protecting Electronic Data: Don't store Restricted data on personal devices.

• Avoid storing Restricted data on mobile computing devices.

• Avoid storing institutional data on personally owned computing devices.

• Don't store Restricted data on CDs, DVDs, USB thumb drives, etc.

• Don't transmit Restricted data via email and other insecure messaging solutions.

• Safeguarding your password: use strong passwords, avoid using the same passwords, change passwords regularly, and don't write them down or store them on insecure sites.

• Secure your computer: update operating systems, enable automatic software updates, install and maintain antivirus and firewall software.

• Protecting Physical Data. Close and lock when leaving your office. Lock file cabinets properly. Keep data out of plain view and don't leave data in visible locations.

• Protecting verbal data: Be mindful of surroundings Discussing Restricted Data.

• Disposing of Data: Place Data when not needed, Use Identity Finder for secure data deletion, and properly dispose of electronic and physical data media.

• Electronic Communications: Avoid opening attachments from untrusted sources and clicking suspicious links.

• Avoid clicking links in electronic communications from untrusted sources: Be wary of phishing scams.

• Additional Considerations: Use official email accounts for business, avoid personal accounts, organize data, and save copies of important outgoing email.

• Avoiding Risky Behaviors Online

• Be cautious when using file sharing applications

• Be cautious when browsing the web

• Be cautious when clicking on shortened URLs

• Avoid any responses to messages or links in pop-up windows

• Reporting any suspected security breach

• Disconnect the computer from the network, contact IT staff, notify users if there is a temporary service outage, preserve any log information, and wait for further instructions.