IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.
-
Upload
frank-owen -
Category
Documents
-
view
215 -
download
0
description
Transcript of IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.
![Page 1: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/1.jpg)
IT Security
CS5493(74293)
![Page 2: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/2.jpg)
IT Security
Q: Why do you need security?A: To protect assets.
![Page 3: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/3.jpg)
What are assets?
• Any item that has value:– People– Intellectual property– Physical property– Data– Services– Reputation
• Assets are the things you want to protect
![Page 4: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/4.jpg)
The SA and Assets
• People– Employees– Shareholders– Customers– Contractors
![Page 5: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/5.jpg)
The SA and Assets
• Physical- The information computing system (hardware,
software)
![Page 6: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/6.jpg)
The SA and Assets
• Intellectual property– Patents– Proprietary source code.– Formulas– plans
![Page 7: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/7.jpg)
The SA and Assets
• Data– Financial data– Customer database– Inventory– Scientific data
![Page 8: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/8.jpg)
The SA and Assets
• Services– Availability of services– Productivity of employees
![Page 9: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/9.jpg)
SA and Services
• Reputation– Brand image
![Page 10: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/10.jpg)
Attacks, Threats, &Vulnerabilities
• Assets are subject to– Threats– Vulnerabilities– Attacks
![Page 11: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/11.jpg)
SA: Threats
• A threat is a potential action that could compromise an asset.
![Page 12: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/12.jpg)
SA: Vulnerabilities
• A vulnerability is a weakness in a system that makes it possible for a threat to cause harm.
![Page 13: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/13.jpg)
SA: Attacks
• An attack is an action that compromises an asset.
![Page 14: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/14.jpg)
Risks
• All risk cannot be eliminated.• Risk is managed analytically through risk
analysis.
![Page 15: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/15.jpg)
Risk Analysis
• Quantifying (in monetary terms) the impact of attacks, threats, and vulnerabilities upon assets.
![Page 16: IT Security CS5493(74293). IT Security Q: Why do you need security? A: To protect assets.](https://reader036.fdocuments.in/reader036/viewer/2022082621/5a4d1b6a7f8b9ab0599b2bd3/html5/thumbnails/16.jpg)
Security Summary
• Protect your assets• Understand the threats• Eliminate the vulnerabilities• Reach an acceptable level of risk