INFORMATION
SECURITY
MANAGEMENT
Presented By:
Fernand T. Layug, DIT
INFORMATION
SECURITY
MANAGEMENT
Presented By:
Fernand T. Layug, DIT
CONCEPTS
Information
Security
is everyone’s job
3 PARTS OF
ORGANIZATION
IT Manager and
Professional
IT Security Manager
and Professional
Business Manager
and Professional
Business Manager
IT Manager
IT Security Manager
IT Security Manager
Protects the organization’s information assets from the
many threats they face
SECURITY
Being free from DANGER. To be secure is to be
protected from the risk of loss, damage and unwanted
modification
SPECIALIZED AREAS OF
SECURITY
Physical
Operations
Communication
Cyber
Network
INFORMATION
SECURITY
InfoSec
focuses on the protection of information and teh
characteristics that give it value, such as
confidentiality, integrity, and availability
COMPONENTS of InfoSec
CNSS Security Model
VALUE OF
INFORMATION AND
C.I.A. TRIAD
.
Confidentiality
Integrity
Availability
Ensuring
information is
accessible only to
authorized
individuals.
Protecting
data from
unauthorized
alterations.
Ensuring systems
and data are
accessible when
needed.
PROVING IDENTITY
Proves our identity
Identification
Authentication
Authorization
Accountability
Claiming who you are
Proving who you
are
What you are
allowed to
access or do
Tracking actions
to the person who
performed them
KEY CONCEPTS
OF INFORMATION
SECURITY
SUN TZU WU
MANAGEMENT AND
LEADERSHIP
Involves using resources to get a job done
Informational
Role
Interpersonal
Role
Decisional
Role
LEADERSHIP
MANAGEMENT
Leader
Lead by example and demonstrate personal
traits that instill a desire in others to follow
Manager
assigned to marshal and administer resources,
coordinate the completion of task and handle the
may roles necessary to complete the desired
objectives
TYPES OF LEADER
Autocratic
Democratic
Laisez-faire
PLANNING
Strategic
Planning
Tactical Planning
Operational
Planning
SIX PRINCIPLES OF
INFORMATION
SECURITY
Planning
Policy
Programs
Protection
People
Project Management
PRIVACY
THANK YOU!