Top Banner
It is a period of cyber attack in the universe. Information and Physical Security, striking from a hidden base, has won another victory against the evil Galactic virus. This computer virus is strong and the spaceships cannot fight the battle alone. Not so long ago, in a galaxy not so far, far, away...
20

Accelerated learning sample for Security Awareness session

Jul 17, 2015

Download

Documents

Sixsigmacentral
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Accelerated learning sample for Security Awareness session

It is a period of cyber attack in the universe. Information and Physical Security, striking from a hidden base, has won

another victory against the evil Galactic virus. This computer virus is strong and the

spaceships cannot fight the battle alone.

Not so long ago, in a galaxy not so far, far, away...

Not so long ago, in a galaxy not so far, far, away...

Page 2: Accelerated learning sample for Security Awareness session

During the battle, Security Agents manage to acquire anti-complacency plans to attack the Empire's ultimate weapon: an armored space

station with enough viruses to destroy productivity

in the Universe.

During the battle, Security Agents manage to acquire anti-complacency plans to attack the Empire's ultimate weapon: an armored space

station with enough viruses to destroy productivity

in the Universe.

Pursued by the Empire's sinister agents, Security races home aboard their starship,

custodian of the acquired plans. They have discovered the one critical element

to fight complacency that will save Texaco and it’s employees and restore security to

the galaxy...

Pursued by the Empire's sinister agents, Security races home aboard their starship,

custodian of the acquired plans. They have discovered the one critical element

to fight complacency that will save Texaco and it’s employees and restore security to

the galaxy...

Page 3: Accelerated learning sample for Security Awareness session

Security sends a message to all employees.

“Help us, employees. You are our only hope!”

Security sends a message to all employees.

“Help us, employees. You are our only hope!”

Page 4: Accelerated learning sample for Security Awareness session

The key to security awareness is embedded in the word security.

The key to security awareness is embedded in the word security.

Page 5: Accelerated learning sample for Security Awareness session

Why are we doing this?

Audit Findings: Physical Intrusion• Two people were able to get in the building. • They also were able to obtain contract badges.• They obtained access to the Data Center.• The intruders used Social Engineering to

convince users to reveal passwords and network information.

Page 6: Accelerated learning sample for Security Awareness session

Why are we doing this?

Audit Findings: Cyber Penetration• Able to access servers that had weak security

configurations.• Able to access dial in devices with “default”

passwords.• Able to steal a list of usernames with passwords

and cracked 6,500 of those passwords in a few days.

• Most were cracked in a couple of seconds.• They exploited trust relationships with Joint

Ventures (JVs).

Page 7: Accelerated learning sample for Security Awareness session

Workshop Guidelines

• Participate actively• Ask questions• Have fun• Learn and teach others• Disagree

It’s O.K. to:It’s O.K. to:

• Be open to others’ ideas• Try, risk and make mistakes• Think unconventionally, creatively• Tell stories that support

Security Awareness• Doodle!!

Page 8: Accelerated learning sample for Security Awareness session

Security Video

• Case for Action video

Page 9: Accelerated learning sample for Security Awareness session

Security Topics We Will Address

Personal

Physical

Information

Page 10: Accelerated learning sample for Security Awareness session

Workplace Violence

Integration with Existing Efforts

Six Sigma and Other Quality Efforts

New Hire Orientation

Safety

Page 11: Accelerated learning sample for Security Awareness session

Activity - Scenario Exercise

Page 12: Accelerated learning sample for Security Awareness session

ScenarioScenario

You receive a phone call from an unknown person. She states that her PC is locked. She would like for you to give her access to the network because she is working on a critical report for the CEO and is in a hurry. She further states that if you don’t assist her, he will certainly hear about it.

What should you do?

Page 13: Accelerated learning sample for Security Awareness session

ScenarioScenario

You are using a DSL communication line in a hotel.

All of a sudden you notice that your personal firewall indicates that someone is probing your PC.

What should you do?

Page 14: Accelerated learning sample for Security Awareness session

ScenarioScenario

A Senior Executive walks into a meeting and he is not wearing a badge.

What should you do?

Page 15: Accelerated learning sample for Security Awareness session

ScenarioScenario

You have recently installed a personal firewall and notice a strange file in your PC.

What should you do?

Page 16: Accelerated learning sample for Security Awareness session

ScenarioScenario

Your friend tells you that his password is DILBERT…

What should you say?

Page 17: Accelerated learning sample for Security Awareness session

Scenario

You are just about to leave for a meeting when you receive a page. The number on your pager displays 809-334-4532.

What should you do?

Page 18: Accelerated learning sample for Security Awareness session

ScenarioScenario

You are looking for something on the internet. Suddenly, an inappropriate site appears on your screen.

Do you immediately tell everyone about this site?

Page 19: Accelerated learning sample for Security Awareness session

Security Contest

Page 20: Accelerated learning sample for Security Awareness session

If not you, who? If not now, when?

Remember

in

SEC-U-R-IT-Y

If not you, who? If not now, when?

Remember

in

SEC-U-R-IT-Y