1. ROB PROW MIPI/MCMI ALTERNATIVE SOLUTIONS LIMITED
INFORMATION SECURITY
ROB PROW MIPI/MCMI
ALTERNATIVE SOLUTIONS LIMITED

2. Quote
“All things appear and disappear because of the concurrence of causes and conditions. Nothing ever exists entirely alone; everything is in relation to everything else” Buddha

3. Information Security is a Global Issue
Affecting:-
International Trading
Electronic commerce
Electronic Communications and transactions
National and global infrastructures
And importantly your organisation!

4. Information Security Risk & Threat
Does your organisation really understand what the risks are?
Vulnerabilities of your information assets?
Vulnerabilities of your Business processes?
Assurance of information integrity, availability and confidentiality?
Vulnerabilities of your information when processed, managed or exchanged between business partners?

5. Governance External:- Regulation (GFSC – Security Thematics)
Financial Intelligence Service (FIS)
Data Protection
Internal:-
Ability to inspire confidence to provide market assurance
Preserve confidentiality, integrity and availability of information

6. Information Security Management System (ISMS)
Reason & Purpose
“Nothing ever exists entirely alone”
Information integrity is protected within a management chain of controls
That chain is only as strong as its weakest link
A need to manage exposure to security risk

7. Information Security Management System (ISMS)
An ISMS Provides:-
Effective measurement of risk, threats and vulnerabilities
Embeds a management regime with regard to risk, decision making and controls
Ensures policy, procedure and best practice is implemented
Engenders an organisational security culture (Awareness programme/training)

8. Information Security Management System (ISMS)
Network Security (Inc. communications and operations)
Manages information handling, exchange & encryption
Measures effectiveness, monitoring/audit and ensures continual improvement
Manages incidents (reporting & investigation)
Provides preparedness (DR & Business Continuity)

9. Solutions
You are the experts in your field and within your organisation & best placed to understand security risks
With the right tools & management systems you are best placed to assess those risks
There are a myriad of technical solutions and security advice available to protect your systems
Solutions need to be measured in accordance with that risk, be pragmatic, affordable but effective & holistic
Solutions need to be embedded within organisational culture

10. Threat & Risk Treatment
QUOTE “Don’t go backwards, you’ve already been there” Ray Charles