Human factors - The weakest link

10
Information Security Topic Banking/Financial Industry By Chandrak Trivedi_101015275

Transcript of Human factors - The weakest link

Page 1: Human factors - The weakest link

By Chandrak Trivedi_101015275

Information Security Topic

Banking/Financial Industry

Page 2: Human factors - The weakest link

Human Factors - The weakest link

Page 3: Human factors - The weakest link

HUMAN FACTORS - The Weakest Link

3

OVERVIEWAnalysis

Impacts

Recommendations

Page 4: Human factors - The weakest link

HUMAN FACTORS - The Weakest Link

4

ANALYSISHuman Factors.Security is often talked about in terms of new technologies.

The real challenges are from non-technical forces, i.e., human issues.

Insiders have the most knowledge about structure, processes, vulnerabilities and the value of its information.

Page 5: Human factors - The weakest link

HUMAN FACTORS - The Weakest Link

5

ANALYSIS According to information security

breaches survey 2015 (UK), “People are the main vulnerabilities to a secure enterprise. Respondents believe that inadvertent human error (48%), lack of staff awareness (33%) and weaknesses in vetting individuals (17%), were all contributing factors in causing the single worst breach that organisations suffered.”

Page 6: Human factors - The weakest link

HUMAN FACTORS - The Weakest Link

6

ANALYSIS

Page 7: Human factors - The weakest link

HUMAN FACTORS - The Weakest Link

7

IMPACTThe greatest impacts of successful security breach attacks involving human factor to our bank will be: Business Operations, Reputational Damage, Revenue loss, Exposure of Cooperate Sensitive

Data, Personal Customer Data and Introduction of Malware in the

Network.

Page 8: Human factors - The weakest link

HUMAN FACTORS - The Weakest Link

8

IMPACT Technology

Introduction to malware or viruses. Privacy

Access to personal customer information along with credit cards details, and

Cooperate Confidential Data. People (Users)

Change in transactions or entries with their accounts.

Receiving Phishing Emails.

Page 9: Human factors - The weakest link

HUMAN FACTORS - The Weakest Link

9

RECOMMENDATION Policies and processes must be

acknowledged and enforced. Apply the principle of least privilege. Closely monitor, control and manage

privileged credentials to prevent exploitation.

Improve awareness campaign and more resources to the employee – to training, education, testing and to the culture of our organization.

Page 10: Human factors - The weakest link

HUMAN FACTORS - The Weakest Link

10

ThankYou