Current Trends in Information Security.pdf

Current Trends in Information Security Bruce W. Edwards, CISA, CIA, FLMI Information Security Officer University of Louisville Bruce.EdwardsJr@ DISCOVER DELPHI! - Thursday, November 10, 2005 Founders Union Building- Shelby Campus Current Trends in Information Security DISCOVER DELPHI! - Thursday, November 10, 2005 Founders Union Building- Shelby Campus Hot Buttons (each of which could fill a text book) - Information is Under Attack - Regulatory Compliance - Effective Information Security vs. Budget and Mind Share - Security Means Control - How much is too much? Current Trends in Information Security DISCOVER DELPHI! - Thursday, November 10, 2005 Founders Union Building- Shelby Campus Information is Under Attack In the news every day - Choice Point, Bank of America, CitiGroup, Universities, NASA, Lexis-Nexis, Wachovia, PNC, Lowes, more… - Goal is to wreck havoc and/or use personal or proprietary information on you, your business, your employees, customers, students for illicit gain, public embarrassment, black mail… Current Trends in Information Security DISCOVER DELPHI! - Thursday, November 10, 2005 Founders Union Building- Shelby Campus Information is Under Attack External Threats Hackers, corporate espionage, terrorists using phishing, viruses, worms, IM exploits, SPAM, social engineering, DNS poisoning, dumpster diving, cell phones, PDAs, laptops, wireless, Blackberries, windows weaknesses… Internal Threats Actually the biggest threat, especially to integrity of information Frequently Overlooked Senior Management, disgruntled employees, contractors, suppliers using the network, laptops, PDAs, cell phones (cameras), iPODS, memory sticks… Current Trends in Information Security DISCOVER DELPHI! - Thursday, November 10, 2005 Founders Union Building- Shelby Campus Regulatory Compliance Dealing with It - the Rule Makers - Regulators and law makers have responded to the threat - HIPAA Security Rule, Patriot Act, Sarbanes Oxley, Privacy and Disclosure Laws (