1.1 Security Management, Corporate Security, Risks & Responsibilities

Question 1

What is involved in the context of security from the early years onwards?

Answer 1

Networked systems
Internet / WWW
Wireless / mobile access

Question 2

Describe the elements of the security context from the early years onwards

Answer 2

Networked systems:
Wider & more diversed group of users
Different level of problems (new threats, new connection requirements)

Internet / WWW:
Massive expansion of access
Easier to use (includes tools)

Wireless / Mobile Access:
Open channels (open airways)
Ubiquity
BYOD (Bring Your Own Device)
Tablets
Smartphones

Question 3

What is involved in the context of web security from early years onwards?

Answer 3

Proprietary systems
Open systems (UNIX)
Stand alone systems

Question 4

Describe the elements of web security in context from the early years onwards

Answer 4

Proprietary Systems:
Embedded security (built in)
Monitoring & accounting functions

Open Systems (UNIX):
Security designed with open arena
Security facilities developed

Stand Alone Systems:
Limited level of security
PC’s devices

Question 5

Why have security issues evolved?

Answer 5

Due to changes in society

e.g. Terrorist attacks in US on Sep 11, 2001

Question 6

What and how does security affect businesses?

Answer 6

Confidential information (increasing at risk)
Breaches cost several billion pounds each year (for UK plc's)
Cyber security (top security threat) - continues to be a problem

Question 7

BISS solutions?

Answer 7

Three pronged approach:
Prevention
Detection
Response

Set up policies and appropriate resources (done by the top of the organisation)

Question 8

What are the general security issues?

Answer 8

Security systems are as strong as its weakest point
Security and ease of use are incompatible
Back seat to market pressures
Security of e-commerce site depends on internet security
Vulnerabilities are increasing faster that they can be prevented
Compromised by common applications
Internal security as or more important than ‘external’
Human side is important (not just technology issues, problems & solutions)