Chapter Title Slide
Understand the multidisciplinary nature of Information Security
Understand the CISO role
List some of the management roles in Information Security
List some of the Technical and Non-Technical roles in Information Security
Chapter Summary Slide
There is no single person who can cover all responsibilities
There is no single department that can cover all responsibilities
Cyber Security risk is managed in different ways
By individuals with different skills
Who form part of different teams
Cyber Security is a team effort
Overall Responsibility lies with:
CIO
Chief Information Officer
Enable business growth through technology
CISO
Chief Information Security Officer
Ensures technology is secure
Historically the CISO has reported to the CIO
Some organisations allow direct reporting to the CEO or board
Executive Cyber Security Roles
Both set strategy and direction
Represent their domain (IT or security) at the board level
Are accountable for risk, compliance, and long…
Can you change the "revision guide" button to be a drop down menu and call it "lesson recaps" and rename the revision.html to "lesson_1.html"
can you create a separate page to to serve as a recap for these slides? This is the text from some slides. Dont quote it verbatim but identify the underlying themes and create a section that focusses on each one - like a revision guide. Here is the content: In this course, you will engage in activities that perform probing actions and may be used to compromise computer systems and networks
You will perform these actions to obtain the skills required to make effective computer security risk assessments
Performing these actions against systems or networks that you are not authorized to access is unethical and subject to legal prosecution in most jurisdictions
Disclaimer
Security Fundamentals
Chapter 1
Chapter Title Slide
Understand the CIA triad
Understand the means and motives of different threat actors
Find specific guidance on APTs
Understand the concept of AAA
APT - Advanced Persistent Threat AAA - Authentication Authorisation and Accounting
Chapter Summary Slide
Confidentiality
Information can only be read by authorised users
Integrity
Information can only be modified by authorised users
Availability
Information is accessible to authorised users - in a timely manner
Non-repudiation
Changes and access to data is recorded in a way which is undeniable
Information Security
Explain the construction of the prompt and what each part means ie USER@HOST:/CURRENT/WORKIN…
