Securing information system (Management Information System)
- 1. Presentation On Securing Information Systems Submitted To Submitted By Bushra Humyra Esha Masudur Rahman Date: ID#2017-1-10-089
- 2. An Information System (IS) is a combination of hardware, software, infrastructure and trained personnel organized to facilitate planning, control, coordination and decision making in an organization. What is Information System
- 3. What is Information System for Information System is A networks of hardware and software that people and organizations use to collect, filter, process, create and also distribute data. Collect Filter Process Create Distribute DATA
- 4. Factors Increasing the Threats to Information Security • Today’s interconnected, interdependent, wirelessly networked business environment • Government legislation • Smaller, faster, cheaper computers and storage devices • Decreasing skills necessary to be a computer hacker • International organized crime turning to cybercrime • Downstream liability • Increased employee use of unmanaged devices • Lack of management support
- 5. Why systems are vulnerable • Human errors. • Hardware problems . • Software problems. • Use of networks/computers outside of firm’s control • Loss and theft of portable devices • Malware (malicious software) • Disaster.
- 6. Human Errors • Shoulder Surfing
- 7. Human Errors • Human Resource & MIS Department Employees These employee hold all the confidential information of an organization.
- 8. Hardware Problem • Hardware problems occurs due to breakdowns, configuration errors, damage from improper use or crime.
- 9. Software Problem • Software problems may occur from programming errors, installation errors, unauthorized changes)
- 10. Unauthorized access • Accessing Organization's resource without permission from outside.
- 11. Loss of portable device • If portable device containing organization information and lost then information may insecure.
- 12. Malware (malicious software) Viruses Rogue software program that attaches itself to other software programs or data files in order to be executed.
- 13. Malware (malicious software) Worms: Independent computer programs that copy themselves from one computer to other computers over a network.
- 14. Malware (malicious software) Trojan horses: Software program that appears to be benign but then does something other than expected.
- 15. Malware (malicious software) Spyware: Programs install themselves surreptitiously on computers to monitor user Web surfing activity and serve up advertising.
- 16. Other issues which can affect information Disaster: because of disaster information can lost too.
- 17. Objective of Securing Information System • The goal of security management is the accuracy, integrity, and safety of all information system processes and resources in organization.
- 18. Objective of Securing Information System Integrity Models : keep data pure and trustworthy by protecting system data from intentional or accidental changes. Integrity models have three goals: • Prevent unauthorized users from making modifications to data or programs. • Prevent authorized users from making improper or unauthorized modifications. • Maintain internal and external consistency of data and programs.
- 19. Objective of Securing Information System Availability Models : keep data and resources available for authorized use, especially during emergencies or disasters. Information security professionals usually address three common challenges to availability: • Denial of service (DoS) due to intentional attacks or because of undiscovered flaws in implementation (for example, a program written by a programmer who is unaware of a flaw that could crash the program if a certain unexpected input is encountered) • Loss of information system capabilities because of natural disasters (fires, floods, storms, or earthquakes) or human actions • Equipment failures during normal use
- 20. Objective of Securing Information System Confidentiality Models Confidentiality model preserve confidentiality integrity and availability only for authorize personal .
- 21. THANK YOU