IT1914: Information Systems Security

Study Notes

Cybersecurity involves safeguarding computers, networks, and data from digital attacks.
Cyberattacks aim to access, modify, or destroy sensitive information, extort money, or disrupt business processes.
An effective cybersecurity strategy combines people, processes, and technology for optimal protection.

Monitor security threats using various mediums and tools.
Analyze and evaluate potential technological threats.
Conduct system audits to identify vulnerabilities.
Implement robust security measures and establish protocols.
Generate reports for stakeholders on security status and incidents.
Educate employees on the importance of cybersecurity throughout the organization.

Security Architect: Creates secure computer systems, requiring an understanding of hacker tactics; often from an IT background.
Security Consultant: Advises on necessary security measures and prepares contingency plans for breaches.
Ethical Hacker: Tests systems for vulnerabilities with permission, working to prevent malicious attacks.
Chief Information Security Officer (CISO): Oversees information and data security operations, managing day-to-day responsibilities and programs.

Reconnaissance: Hackers gather information about a target using network details and employee emails, often through phishing attempts.
Attack: Initial access is gained typically using stolen credentials, enabling hackers to exfiltrate data or encrypt files for ransom.
Expansion: Attackers use malicious software to infiltrate multiple systems within a network.
Obfuscation: Hackers conceal their actions and origins to avoid detection, employing techniques like log cleaning and spoofing.

Technology Risks: Widespread tech use creates new vulnerabilities that need to be managed.
Supply Chain Risks: Increased dependence on third-party services and IoT raises cyber threats; companies must enforce rigorous risk management.
IoT Risks: Unsecured IoT devices present significant security threats as their numbers increase with new technologies.
Business Operations Risks: Greater internet connectivity can lead to security holes, requiring heightened awareness and preparedness.
Employee Risks: Employees, often unaware of their potential threat, can create security breaches; strong governance and training are essential.
Regulatory Risks: New regulations demand a balance between compliance and evolving cyber threats.
Board of Directors Risks: Oversight by board members has become crucial for strategic cybersecurity preparedness.

Ransomware: Software that extorts payment by blocking access to files until the ransom is paid, often leveraging access control and encryption.
Data Integrity: Ensures information remains accurate and protected, implemented through encryption and redundancy strategies.
Availability: Ensures data is accessible to authorized users, utilizing methods like hardware maintenance and redundancy to prevent downtime.

Establish a framework for classifying data by sensitivity and value, aiding in determining appropriate security controls.
The data management life cycle involves continual understanding, classification, and reevaluation as data changes and evolves.