Managing your Data when Mobile
0 likes257 views
This document provides a summary of managing data when mobile. It discusses selecting an appropriate framework like NIST or ISO, partnering across IT to identify power users, and understanding what data needs to be managed. It also covers establishing an appropriate risk appetite by identifying risks to critical resources and maintaining a risk register. Finally, it suggests tools like user behavior analytics and identity and access management, as well as the importance of security engagement through one-on-one meetings with executives.
Managing your Data when Mobile
- 1. MANAGINGYOUR DATA WHEN MOBILE Elliott Franklin Jeff Reich
- 2. WHO ARE WE? Elliott Franklin CISSP, CISM Information Security Officer, Essilor of America Jeff Reich CISSP, CRISC, ISSA Distinguished Fellow, ISSA Hall of Fame Chief Security Officer for Barricade
- 3. ANOTHERTALK ON MOBILE SECURITY? NO! Let’s focus on protecting your information, wherever it is! • Security Engagement • Management • Risk Appetite • Tools?
- 4. MANAGEMENT Select a Framework NIST, ISO 27001, PCI, HIPAA Partner across IT Identify Power Users across Business Units What do you manage?
- 5. RISK APPETITE Identify Risks to Resources Supporting Critical Functions Risk Register IT Executive Governance Uptime, SLAs,AddingValue
- 7. Cost versus LossValue Level of Controls Tree of FUD Potential Impact Cost of Controls Good Business Sense
- 8. SECURITY ENGAGEMENT Intentional One:One Meetings Take your CFO to Lunch! Adding value to the business Educate executives on the value of data
- 9. TOOLS? The Basics User Behavior Analytics Identity and Access Management