Information Security Management Quiz

Introduction to Information Security Management

• Course details: 1502373 - Information Security Management, Spring 2024-25, taught by Dr. Saddaf Rubab, in MS-220
• Quote from Book of the Five Rings: "Do not figure on opponents not attacking; worry about your own lack of preparation."
• Information security issues can exist even with comprehensive protections in place
• Examples of security problems: poor passwords, security breaches in security practices, credential spills, credential abuse

Information Security Management

• Real-life data breaches occur due to insider threats
• Data breaches caused by malicious or inadvertent insider actions result in financial and reputational damage
• The importance of understanding information assets, security threats and how to prepare for incidents is highlighted

Early Forms of Information Security

• German Enigma code machines broken earlier by the Poles (1930s) and later by the British/Americans during World War II
• Allied forces benefited from decryption of German communications
• Complex versions of the Enigma machine caused considerable issues for the allied forces before being cracked

The 1990s

• Increased networking and internet use created the need to interconnect networks
• Security wasn't treated as a priority in early internet deployments

2000 to Present

• Internet connects various (and many insecure) computer networks
• A computer's security depends on the security of the interconnected systems
• Increased cyberattacks necessitate improved security efforts

Information

• Data is an asset that, like other critical business components, requires safety
• Information assets need security protection

Information Can Be

• Information is displayed, transmitted, shown on video, displayed/published online, stolen, printed/written on paper, stored electronically, and created
• Information, regardless of form, must be appropriately protected

What is Security

• Organizations should use multiple layers of security measures (physical, personal, operations, communication, network, and information security)

What is Information Security?

• Information security aims to safeguard organizational data assets

Components of an Information System

• Information systems consist of software, hardware, data, people, procedures, and networks
• Understanding these components is crucial to fully grasping the importance of information security

Key Information Security Concepts

• Protection profile/security posture: Information security evaluation
• Risk: The potential loss associated with a threat
• Subjects and objects: Subjects are users and devices; objects are data
• Threat Agent: A person or organization that could pose a threat
• Vulnerability: A weakness that can be exploited
• Access, Asset, Attack, Control/Safeguard, Exploit, Exposure, and Loss are key facets of security

Components of Information Security

• Confidentiality, Integrity, and Availability (CIA) are the core elements of information security.
• Managing computer security, data security, and network security is essential

Confidentiality

• Access to information restricted to authorized users
• Measures like classification, secure storage, security policies, and user education are important

Integrity

• Information accuracy and completeness are maintained
• Data quality is preserved and safeguards against corruption, damage, destruction, or disruption of information

Availability

• Authorized users can access data when needed without interference
• Data should be available in the required format to authorized users

Key Concepts of Information Security (Authentication and Authorization)

• Authentication: Verifying a user's identity
• Three types of authentication: Something you know, something you have, something you are
• Authorization: Granting access based on the authenticated user's role or permission
• Access control regulates interactions with assets and dictates permitted actions

Key Concepts of Information Security (Accountability)

• Tracking actions to accountable parties.

The Operational Method of Computer Security and Technologies

• Protection: Prevention, detection, and response
• Prevention, Detection, and Response (PDR) is a comprehensive approach
• Access controls, firewalls, encryption, audit logs, intrusion detection systems, honeypots, incident response teams, and computer forensics are used

Securing the Components

• Computers can be attacked or used to launch attacks
• Attack subjects and objects, along with attack methods.

CNSS Security Model

• Policy, Education, Technology.
• CIA's principles are crucial aspects of computer security.

Balancing Security and Access

• Balancing security with access to systems requires understanding how to protect data and user security

On-Going Process

• Perfect security is unachievable; ongoing improvements and risk management are critical
• Security needs continuous monitoring and improvement.

References

• Michael & Herbert,(2017), Principles of Information Security; ISBN: 9781337102063

Case Study 1

• Discussion questions: Insider or outsider attack?, Next incident preparation? (beyond software), Virus or worm cause?, Ethical implications of file opening, appropriate response to suspicious emails