Security Awareness. Katja Dörlemann Zurich, 15. Februar SWITCH 1

Transcription

1 Security Awareness Katja Dörlemann Zurich, 15. Februar SWITCH 1

2 1. Cyber Threats a short introduction 2. Security Awareness what is it and why? 3. elearning and the fight against cyber crime 2018 SWITCH 2

3 Cyber Threats a short introduction 2018 SWITCH 3

4 2018 SWITCH 4

5 Universities as a target? 2018 SWITCH 5

6 2018 SWITCH 6

7 2018 SWITCH 7

8 2018 SWITCH 8

9 2018 SWITCH 9

10 2018 SWITCH 10

11 2018 SWITCH 11

12 2018 SWITCH 12

13 2018 SWITCH 13

14 2018 SWITCH 14

15 Don t be scared Your IT (security) team protects you 2018 SWITCH 15

16 MALWARE 2018 SWITCH 16

17 New Malware More than per day Roughly 4 per seconds In 4 days as many as in SWITCH 17

18 2018 SWITCH 18

19 Cyber Fraud 2018 SWITCH 19

20 2018 SWITCH 20

21 2018 SWITCH 21

22 SPAM 2018 SWITCH 22

23 SPAM 269 billion mails sent and received per day around 60% are spam s 2018 SWITCH 23

24 2018 SWITCH 24

25 Don t be scared Your IT (security) team protects you 2018 SWITCH 25

26 Don t be scared Your IT (security) team protects you from most of it 2018 SWITCH 26

27 Security Awareness what is it and why? 2018 SWITCH 27

28 What is Security Awareness? 2018 SWITCH 28

29 What is Security Awareness? Depends on who you ask SWITCH 29

30 Theory: Security Awareness is ISO 27000:2016: [one of the] fundamental principles [that] contribute to the successful implementation of an ISMS. wikipedia: the knowledge and attitude members of an organization possess regarding the protection of the physical, and especially informational, assets of that organization. NIST SP800-50: not training. The purpose of awareness presentations is simply to focus attention on security. OECD Guidelines for the Security of Information Systems and Networks: the first line of defence for the security of information systems and networks SWITCH 30

31 Praxis: 2018 SWITCH 31

32 The Human Factor 2018 SWITCH 32

33 2018 SWITCH 33

34 2018 SWITCH 34

35 Security that doesn t work for people, doesn t work. - Emma W, lead for people-centered security at NCSC 2018 SWITCH 35

36 Resources for Security Awareness 2018 SWITCH 36

37 2018 SWITCH 37

38 Security Awareness is about communication, training & education 2018 SWITCH 38

39 Ich bin das Zitat, darum ist es The geeks have inherited orange und kursiv. awareness (is that good?). Max SANS Mustermann Security Awareness Report 2018 SWITCH 39

40 2018 SWITCH 40

41 elearning and the fight against cyber crime 2018 SWITCH 41

42 elearning plays a crucial role in getting the message across - Reaches the whole organisation - Educates and informs - Is a central platform and monitored 2018 SWITCH 42

43 What you can do 2018 SWITCH 43

44 2018 SWITCH 44

45 Support your local IT Security Team: - Listen and try to understand - Help translating - Encourage to create elearning content 2018 SWITCH 45

46 Include «Cyber Security» in your education strategy: - Promote the topic - Include elearning on Cyber Security in general obligatory classes 2018 SWITCH 46

47 STOP.THINK.CONNECT. Community 2018 SWITCH 47

48 STOP.THINK.CONNECT. Global: Switzerland: more than 50 countries around 700 institutions around 40 institutions 2018 SWITCH 48

49 Beware of the Phishing Hook BEWARE OF THE PHISHING HOOK SWITCH 49

50 Upcoming initiatives: Password Day May 2018 ECSM 2018 October SWITCH 50

51 Content and more 2018 SWITCH 51

52 SWITCH Security Awareness Day 24. Oktober SWITCH 52

53 2018 SWITCH 53 Working for a better digital world

54 Verweise Slides 6-14: Slide 51: SWITCH 54