1. Principles of Information Security Kris Rosenberg, Chief Technology Officer Oregon State University College of Business Kris Rosenberg, Chief Technology Officer Oregon State University College of Business

2. What is “Information Security”  “ The concepts, techniques, technical measures, and administrative measures used to protect information assets from deliberate or inadvertent unauthorized acquisition, damage, disclosure, manipulation, modification, loss, or use ”. - McDaniel, George, ed. IBM Dictionary of Computing. New York, NY: McGraw-Hill, Inc., 1994.  “ The concepts, techniques, technical measures, and administrative measures used to protect information assets from deliberate or inadvertent unauthorized acquisition, damage, disclosure, manipulation, modification, loss, or use ”. - McDaniel, George, ed. IBM Dictionary of Computing. New York, NY: McGraw-Hill, Inc., 1994.

3. Why is Information Security Important?  Moving towards an “Information based economy”.  Increasingly hostile public networks.  Moving towards an “Information based economy”.  Increasingly hostile public networks.

4. Who is Responsible for Information Security?  EVERYONE  Information Security is a business issue, not just an IT issue, and needs to be addressed as such.  EVERYONE  Information Security is a business issue, not just an IT issue, and needs to be addressed as such.

5. Information Security Across the Enterprise

6. Human Resources  Information Classification  Privacy Issues  Information Classification  Privacy Issues

7. Accounting  The 3 A’s of Information Security:  Authentication  Authorization  Auditing / Accounting  The 3 A’s of Information Security:  Authentication  Authorization  Auditing / Accounting

8. B2B  Firewalls  VPN  Firewalls  VPN

9. Marketing & E-Commerce  Denial of Service Attacks (DoS)

10. Operations  E-mail  Viruses  Patches  E-mail  Viruses  Patches

11. Q&A