Entry level information security presentation for college freshman.

1. +
information security
Fundamentals

2. +
Secure what?
 Physical Assets
Ultimately, the goal is to protect information.
 Network/Commun However, to accomplish that goal physical
ications assets must be secured and protected, and
users must be educated, trained and
 Data/Information responsible.
 Users

3. +
Evaluate
 What is being protected?
 hardware, software, confidential and proprietary information
 Why?
 your business image, business information, legal
 Value?
 Can you afford to lose “it”? Can you afford the legal costs?

4. +
Layers of Protection
 Physical Location  Devices  Data
 Building  Flash Drive  Image Files
 Office  Laptop  Text
 Home  Workstation  Spreadsheet
 Car  Smartphone  Database
 Briefcase  Tablet
 Data Center

5. +
Hardware Physical Security
 Fire protection
 Climate control
 Physical security

6. +
UPS – Keeping Things Running
 Uninterruptible Power Supply
 Battery
 Generator
 Not just computers
 Phones and TV
 A/C (select areas)
 Lighting (select areas)

7. +
Network Infrastructure
 Wireless access
 User accounts
 Firewalls
 Physical
 Software
 Network monitoring software
 Physical protection

8. +
Data Protection
 Backups
 Global
 User
 Anti-
 Malware
 Virus
 Adware
 Worms
 Trojans

9. +
Data Protection
 Email
 Encrypted
 Digital Signatures
 Security Threats
 Phishing Mails
 Storage devices
 User authentication
 Do not share passwords or accounts
 POS and PMS systems
 Timekeeping
 Money
 PCI DSS(Payment Card Industry Data Security Standards)
Compliance

10. +
Making it Work
 Education/Training/Accountability
 Polices
 Procedures
 Documentation
 Management
 Accountability
 Checks and balances

11. +
The end
 Conclusion
 Questions?