CS205 Handouts by Study with BRD

Topic No 1: What is Information Security?

Protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction. IT Security is information security applied to technology Information security also covers physical security, human resource security, legal & compliance, organizational, and process related aspects

IT Security functions:

• Network security
• Systems security
• Application & database security

InfoSec functions:

• Governance
• Policies & procedures

What is Cyber Security?

• Precautions taken to guard against unauthorized access to data (in electronic form) or information systems connected to the internet
• Prevention of crime related to the internet
• Confidentiality: keeping information secret
• Integrity: keeping information in its original form
• Availability: keeping information and information systems available for use

Topic No 02: Why Is Information Security Needed?

Bangladesh Bank SWIFT Hack – Feb 2016: Hackers used SWIFT credentials of Bangladesh Central Bank employees to send more than three dozen fraudulent money transfer requests.

• Requests sent to the Federal Reserve Bank of New York asking the bank to transfer millions of the Bangladesh Bank’s funds to bank accounts in the Philippines, Sri Lanka and other parts of Asia.
• Total impact could have been USD 1 billion

The Importance Of Information

• IT is pervasive in our society & critical to the Ops & Mngmt of all organizations

USD 81 million stolen

Personal:

• IT is an enabler for business and govt
• Personal information is vital for individuals to function in society

Topic No 03: Who Is Information Security For?

• Social media passwords and safe usage
• Online banking and email account passwords
• Home PC/laptop security
• Board and executive leadership (management commitment)
• CISO (responsible to drive security program)
• IT staff and business users (following information security policies & procedures)
• Legal and policy making Information holds value