cyber essentia ials and is iso27001
play

Cyber Essentia ials and IS ISO27001 Visit: www.pgitl.com Visit: - PowerPoint PPT Presentation

Feb 05, 2024 •479 likes •776 views

Cyber Essentia ials and IS ISO27001 Visit: www.pgitl.com Visit: www.pgitl.com Steve Mair Senior Cyber Security Consultant @PGICyber and @SteveMair13 Visit: www.pgitl.com 3 Questions to Start Visit: www.pgitl.com Do you know What

  1. Cyber Essentia ials and IS ISO27001 Visit: www.pgitl.com Visit: www.pgitl.com

  2. Steve Mair Senior Cyber Security Consultant @PGICyber and @SteveMair13 Visit: www.pgitl.com

  3. 3 Questions to Start Visit: www.pgitl.com

  4. Do you know… What percentage of FSB members have Cyber Essentials or ISO 27001? 2% 2% Source: FSB “Cyber Resilience: How to protect small firms in the digital economy” Visit: www.pgitl.com

  5. Did you know… 49% Phishing emails 37% Spear phishing emails 29% Malware attacks 24% Password Policy 4% Documented incident plan Source: FSB “Cyber Resilience: How to protect small firms in the digital economy” Visit: www.pgitl.com

  6. Complicated is not always best Visit: www.pgitl.com

  7. Today’s Topics Cyber Essentials ISO 27001 How do you choose Visit: www.pgitl.com

  8. Cyber Essentials and Cyber Essentials Plus Visit: www.pgitl.com Visit: www.pgitl.com

  9. The journey so far 2012 2012 Making the UK a Safer Ten Steps to Cyber Place to do Cyber Security Essentials Business 2014 2014 2011 2011 Visit: www.pgitl.com

  10. Why Cyber Essentials? Government requirement Industry recognition Threat protection Customer expectation Visit: www.pgitl.com

  11. Content Boundary Firewalls Secure and Access Control Configuration Internet Gateways External Penetration Malware Protection Patch Management Test 26 Controls in total Visit: www.pgitl.com

  12. How Self Certification Third Party Certification Annual recertification Visit: www.pgitl.com

  13. ISO / IEC 27001 Visit: www.pgitl.com Visit: www.pgitl.com

  14. The Journey 1995 BS7799 Introduced 1998 BS7799 Revised 2005 ISO/IEC 17799 Revised 2000 Adopted as ISO/IEC 17799 2007 ISO/IEC 27002 2013 Adopted ISO/IEC 27002 Revised Visit: www.pgitl.com

  15. Why ISO 27001? Global brand Industry recognition Threat protection Customer expectation Visit: www.pgitl.com

  16. Content Information Security Organisation of Human Resources Physical and Asset Management System Acquisition, Policies Information Security Information Security Access Control Cryptography Security Communications Environmental Operations Security Information Security Development and aspects of Business Supplier Relationships Security Security Compliance Incident Management Maintenance Continuity Mangement 114 controls in total Visit: www.pgitl.com

  17. How Timescales Third Party Certification Maintenance Visits 3-Yearly Recertification Visit: www.pgitl.com

  18. Cyber Essentials v ISO / I IEC 27001 Visit: www.pgitl.com Visit: www.pgitl.com

  19. Comparison CE CE Plus ISO27001 Review Internal External External Visit: www.pgitl.com

  20. Comparison CE CE Plus ISO27001 Frequency Annual 3 Years Annual Visit: www.pgitl.com

  21. Comparison CE CE Plus ISO27001 Domains 5 14 5 Visit: www.pgitl.com

  22. Comparison CE CE Plus ISO27001 Controls 26 114 26 Visit: www.pgitl.com

  23. Comparison CE CE Plus ISO27001 6-9 Months Time 1-2 Days 3-5 Days Visit: www.pgitl.com

  24. Comparison CE CE Plus ISO27001 Review Internal External External Frequency Annual 3 Years Annual Domains 5 14 5 Controls 26 114 26 6-9 Months Time 1-2 Days 3-5 Days Visit: www.pgitl.com

  25. How do you choose? Visit: www.pgitl.com Visit: www.pgitl.com

  26. Costs Benefits Risks Opportunities GDPR Visit: www.pgitl.com

  27. Today we talked about… History What they are Selection Next steps Visit: www.pgitl.com

  28. Remember… Complex is not always best Romantik Seehotel Jaegerwirt in Austria Photo: CEN Visit: www.pgitl.com

  29. Thank You • PGI Portal: https://cyberservicesportal.pgicyber.com • PGI Services: https://pgicyber.com/products • This presentation: http://bit.ly/2jCnDMT @PGICyber and @SteveMair13 Visit: www.pgitl.com

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

Combating Email Fraud Maitham Al Lawati, CISSP, CISM, CRISC, CCSP, CEH, ISO27001 LI General

Combating Email Fraud Maitham Al Lawati, CISSP, CISM, CRISC, CCSP, CEH, ISO27001 LI General

Combating Email Fraud Maitham Al Lawati, CISSP, CISM, CRISC, CCSP, CEH, ISO27001 LI General Manager Risk, Compliance & MSS ISO27001:2013 u2 Do you know that the bad guys can send spoofed emails on behalf your domain name and they can

298 views • 12 slides
Tools for Feature Extraction Exploring and using the essentia library A. Hanke 1 A. Paranjape 2 1

Tools for Feature Extraction Exploring and using the essentia library A. Hanke 1 A. Paranjape 2 1

Introduction to essentia Danceability() Classifying Songs Conclusion and Summary Tools for Feature Extraction Exploring and using the essentia library A. Hanke 1 A. Paranjape 2 1 andrea.hanke rwth-aachen.de 2 akshay.paranjape

1.48k views • 66 slides
An Essentia Health Story Keep Out! Avoiding Readmissions with Heart Failure. gpTRAC Annual

An Essentia Health Story Keep Out! Avoiding Readmissions with Heart Failure. gpTRAC Annual

An Essentia Health Story Keep Out! Avoiding Readmissions with Heart Failure. gpTRAC Annual Conference, Bloomington, MN April 3, 2017 Maureen Ideker, RN, BSN, MBA System Director of Telehealth Essentia Health as an ACO One of six

507 views • 18 slides
Thai Digital ID Co.,Ltd. Building Trusted National Root CA - Thailands Experience ISO27001

Thai Digital ID Co.,Ltd. Building Trusted National Root CA - Thailands Experience ISO27001

Thai Digital ID Co.,Ltd. Building Trusted National Root CA - Thailands Experience ISO27001 Enabling Trust and Security for Reliability of your Business TDID & CA Service TDID & CA Service Standard PKI Environment CA

510 views • 23 slides
RM23 Wo rke r s Co mpe nsa tio n 201 THESE MATERIA IALS HAVE B BEEN P PREPARED B BY T

RM23 Wo rke r s Co mpe nsa tio n 201 THESE MATERIA IALS HAVE B BEEN P PREPARED B BY T

APRIL 13- 16, 2016 RM23 Wo rke r s Co mpe nsa tio n 201 THESE MATERIA IALS HAVE B BEEN P PREPARED B BY T THE C CASBO X XXXX P XXX PROFESSIO IONAL COU COUNCIL CIL O OR BY AN ASSOCIA IATE M MEMBE BER. THE HEY HA HAVE N NOT

197 views • 19 slides
NSF Activities in Cyber Trust NSF Activities in Cyber Trust NSF Activities in Cyber Trust For

NSF Activities in Cyber Trust NSF Activities in Cyber Trust NSF Activities in Cyber Trust For

NSF Activities in Cyber Trust NSF Activities in Cyber Trust NSF Activities in Cyber Trust For ACM CCS I ndustry/ Govt Track Oct. 26, 2004 Carl Landwehr ( clandweh@nsf.gov ) Cyber Trust Coordinator National Science Foundation What s the

439 views • 17 slides
CYBER CYBER-SAFETY CYBER CYBER SAFETY SAFETY SAFETY BASICS BASICS Engineering Staff College

CYBER CYBER-SAFETY CYBER CYBER SAFETY SAFETY SAFETY BASICS BASICS Engineering Staff College

3/29/2012 CYBER CYBER-SAFETY CYBER CYBER SAFETY SAFETY SAFETY BASICS BASICS Engineering Staff College of India I N T R O D U C T I O N What is Cyber-safety Consequences Threats of Inaction Cyber-safety? Cyber-safety Cyber-safety at

215 views • 7 slides
What is Cyber Crime? Cyber Enabled Crime Cyber Dependant Crime Traditional crime that is

What is Cyber Crime? Cyber Enabled Crime Cyber Dependant Crime Traditional crime that is

R egional C yber C rime U nit DC Louise Gibson Prepare, Prevent & Protect What is Cyber Crime? Cyber Enabled Crime Cyber Dependant Crime Traditional crime that is enhanced in scale or Crimes that can only be committed solely reach by use

316 views • 9 slides
Integr grate ted C Computa tatio tional Ma l Materia ials ls Science & Sc &

Integr grate ted C Computa tatio tional Ma l Materia ials ls Science & Sc &

Integr grate ted C Computa tatio tional Ma l Materia ials ls Science & Sc & Engineering ( (IC ICMSE SE ) ) Appr pproache hes t to Problems wi with h Evolving D Domai mains Somnat nath G h Ghosh Depar De artments

651 views • 37 slides
Th Thir ird In Internatio ional l Symposiu ium on Nanoporous Materia ials ls by All lloy

Th Thir ird In Internatio ional l Symposiu ium on Nanoporous Materia ials ls by All lloy

Th Thir ird In Internatio ional l Symposiu ium on Nanoporous Materia ials ls by All lloy Co Corr rrosio ion Philadelphia, PA, USA February 24-28, 2019 Organizers: Joshua Snyder, Ian McCue, Haijun Jin Conference Website:

318 views • 12 slides
Computational Mater ials Design and Disc over y E ner gy and E lec tr onic Applic ations

Computational Mater ials Design and Disc over y E ner gy and E lec tr onic Applic ations

Computational Mater ials Design and Disc over y E ner gy and E lec tr onic Applic ations Synthesis Str uc tur e Pr oper ties Rechargeable batteries Supercapacitors Super- computer Fuel cell catalysts

661 views • 10 slides
Th The e new ew tre rends ds of f nan anoma omater terials ials ap appl plica

Th The e new ew tre rends ds of f nan anoma omater terials ials ap appl plica

Th The e new ew tre rends ds of f nan anoma omater terials ials ap appl plica ications tions fo for r bionanosensor nanosensors an and nan anomedi omedicine cine NANOGENT ANOGENTOOL OLS S EU EU AUTUMN UTUMN SCHOOL SCHOOL

986 views • 76 slides
Cyber Security Risk Using the Cyber Security Measurement Framework Cyber Security Framework

Cyber Security Risk Using the Cyber Security Measurement Framework Cyber Security Framework

Cyber Security Risk Using the Cyber Security Measurement Framework Cyber Security Framework Reporting Objectives Executive Summary Information Assess Current Cyber Security Posture Measure Progress Toward Improvement Assess

634 views • 5 slides
The Cyber Threat: Securing Cyber Infrastructure Overview What are the FBIs Priorities?

The Cyber Threat: Securing Cyber Infrastructure Overview What are the FBIs Priorities?

The Cyber Threat: Securing Cyber Infrastructure Overview What are the FBIs Priorities? What is the FBIs Cyber Structure? HQ Division Dedicated Cyber squads in all 56 field offices, including satellite locations overseas.

1.54k views • 14 slides
Strategic Priorities Assurance Board Cyber and Cyber Enabled Crime Introduction Cyber

Strategic Priorities Assurance Board Cyber and Cyber Enabled Crime Introduction Cyber

Strategic Priorities Assurance Board Cyber and Cyber Enabled Crime Introduction Cyber Dependent crime examples of these offences are Distributed Denial of Service attack (DDOS), Account Compromise (hacking), Malware (virus) and

237 views • 7 slides
Cyber Security February - 2016 Agenda Overview of Cyber Crime The top cyber threats to UK

Cyber Security February - 2016 Agenda Overview of Cyber Crime The top cyber threats to UK

Cyber Security February - 2016 Agenda Overview of Cyber Crime The top cyber threats to UK businesses and how to remain safe What help is available Further reading Setting the scene 21.2bn The cost of fraud to the

304 views • 19 slides
UNSAFE AT ANY SPEED: CYBERSECURITY FOR LAWYERS MICHAEL P. HANNIGAN KONICEK & DILLON, P.C.

UNSAFE AT ANY SPEED: CYBERSECURITY FOR LAWYERS MICHAEL P. HANNIGAN KONICEK & DILLON, P.C.

9/19/2018 UNSAFE AT ANY SPEED: CYBERSECURITY FOR LAWYERS MICHAEL P. HANNIGAN KONICEK & DILLON, P.C. UNDERSTANDING THE PROBLEM Insecure Communications vs. Insecure Credentials 1 9/19/2018 IMPORTANT TERMS Phishing Spear

293 views • 6 slides
Results from Help Us Protect the Carnegie Mellon Community from Identity Theft study A

Results from Help Us Protect the Carnegie Mellon Community from Identity Theft study A

Results from Help Us Protect the Carnegie Mellon Community from Identity Theft study A Real-Word Evaluation of Anti-Phishing Training Mary Ann Blair Lorrie Faith Cranor Ponnurangam Kumaraguru (PK) Joint work with Justin Cranshaw,

964 views • 74 slides
Webinar: Does Your Foundation Take Cybersecurity Seriously? Presenter: John Ansbach, Vice

Webinar: Does Your Foundation Take Cybersecurity Seriously? Presenter: John Ansbach, Vice

Webinar: Does Your Foundation Take Cybersecurity Seriously? Presenter: John Ansbach, Vice President, Stroz Friedberg Sponsored by: CYBER Cybersecurity Webinar John Ansbach, JD, CIPP-US @johnansbach jansbach@strozfriedberg.com 3 4

830 views • 54 slides
Welcome Agenda GDPR is in force now and applies to Australian businesses What does GDPR require?

Welcome Agenda GDPR is in force now and applies to Australian businesses What does GDPR require?

Welcome Agenda GDPR is in force now and applies to Australian businesses What does GDPR require? How does an Australian business comply? Action Plan Section 1: GDPR is here Privacy in the digital age Historically, privacy was almost

513 views • 40 slides
Cyber Security User Overview Martin Dinham Martin.Dinham@cfsystems.co.uk 01209 340030 Some

Cyber Security User Overview Martin Dinham Martin.Dinham@cfsystems.co.uk 01209 340030 Some

Cyber Security User Overview Martin Dinham Martin.Dinham@cfsystems.co.uk 01209 340030 Some context Daily Mail online, April 2017 52 % the number of small businesses that had a security breach in 2016 UK Government Cyber Security

619 views • 39 slides
ASBMT Pharmacy Special Interest Group (SIG) Update 2014 2015 Jamie F Shapiro, Pharm.D, BCOP

ASBMT Pharmacy Special Interest Group (SIG) Update 2014 2015 Jamie F Shapiro, Pharm.D, BCOP

1/21/2015 ASBMT Pharmacy Special Interest Group (SIG) Update 2014 2015 Jamie F Shapiro, Pharm.D, BCOP Clinical Pharmacy Coordinator, Stem Cell Transplant Chair, ASBMT Pharmacy SIG February 13, 2015 Disclosures I have no relevant disclosures

395 views • 12 slides
Private Higher Education Interest Group Submission to the Commission of Inquiry in to Higher

Private Higher Education Interest Group Submission to the Commission of Inquiry in to Higher

Private Higher Education Interest Group Submission to the Commission of Inquiry in to Higher Education and Training on the Feasibility of Fee Free Education In summary Very conscious of the extensive work already done and the time for the

330 views • 4 slides
NFC Programming Jens Herter November 2019 Signify Classified - Internal Smart standards.

NFC Programming Jens Herter November 2019 Signify Classified - Internal Smart standards.

NFC Programming Jens Herter November 2019 Signify Classified - Internal Smart standards. Smarter lighting. MD-SIG A standardized smart electrical interface between LED control gear and modules is the missing link essential to the maturity

390 views • 6 slides

More recommend