scar O’Connor Consulting Limited 2014 In Association with Presentation by Presented By Is our Expertise Adding Value? Business Continuity & Security – A Good Fit? Oscar O’Connor BSc FBCS CEng CITP MBCS FRSA
Feb 22, 2016
© Oscar O’Connor Consulting Limited 2014
In Association with
Presentation by
Presented By
Is our Expertise Adding Value?Business Continuity & Security – A Good Fit?
Oscar O’ConnorBSc FBCS CEng CITP MBCS
FRSA
© Oscar O’Connor Consulting Limited 2014
Overview
Issues Strategic Planning
Measuring Performan
ceProgramme Planning
Conclusions &
Questions
But first, a little bit of fun…
© Oscar O’Connor Consulting Limited 2014
But before I begin…
TO REDUCE FILE SIZE I HAVE REMOVED THE VIDEO FROM THIS VERSION OF THE
PRESENTATION BUT IT IS AVAILABLE FROM THE SAME PAGE OF MY WEBSITE.
© Oscar O’Connor Consulting Limited 2014
Al Arabiya News19 May 2013
The Interior Ministry’s website crashed on Wednesday after receiving a huge amount of service requests, an unnamed official source at the National Centre of the Electronic Security at the Ministry of Interior told SPA.
The cyber-attacks targeted four ministries: the Ministry of Interior, Ministry of Foreign Affairs, Ministry of Finance, and the Ministry of Labor, Mansour al-Turki, spokesman of the Ministry of Interior in Saudi Arabia told al-Watan newspaper.
© Oscar O’Connor Consulting Limited 2014
Issues
Accidental Damage
Malicious Insider
Website redirection
Child Exploitatio
n
Incident Response Capability
Information leakage
Theft & Fraud
Process Disruption
Business Continuity
Criminal damage
© Oscar O’Connor Consulting Limited 2014
Bloomberg22 July 20133
The United Arab Emirates, the second-largest economy in the Middle East, fought off a series of cyber-attacks later traced to Egypt.
The July 19 attacks targeted governmental websites, the Telecommunications Regulatory Authority said today in a statement on it website. The country’s computer emergency response team managed to neutralize the danger and fix the problem with “minimal damage caused,” it said. The targeted sites were not identified in the statement.
The U.A.E. and other Gulf countries, including Saudi Arabia, are increasing efforts to defend against cyber attacks after a series of network infiltrations. Saudi Arabia in December blamed unidentified people based outside the kingdom for a cyber-attack against state-owned Saudi Arabian Oil Co. aimed at disrupting production from the world’s largest exporter of crude oil.
© Oscar O’Connor Consulting Limited 2014
Strategic Planning
Language“Theirs” not “ours”
PeopleSuccess must be FELTWITH not TO
ImpactFocus on outcome not output
PracticeEvery security incident is a continuity event
© Oscar O’Connor Consulting Limited 2014
Al Arabiya News, 19 May 2013
The Interior Ministry’s website crashed on Wednesday after receiving a huge amount of service requests, an unnamed official source at the National Centre of the Electronic Security at the Ministry of Interior told SPA.
The cyber-attacks targeted four ministries: the Ministry of Interior, Ministry of Foreign Affairs, Ministry of Finance, and the Ministry of Labor, Mansour al-Turki, spokesman of the Ministry of Interior in Saudi Arabia told al-Watan newspaper.
© Oscar O’Connor Consulting Limited 2014
Measuring Performance
Business MetricsCustomer SatisfactionReputationBottom Line ProfitStaff SatisfactionEfficiencyReturn on Investment
Appropriate to the organisation
Is “best practice” good enough?Or is it not quite right for everyone?
© Oscar O’Connor Consulting Limited 2014
Reuters3 Sept 2013
Cyber attacks are mostly focused on Saudi Arabia, the world's largest oil exporter, Qatar, the top liquefied natural gas supplier, and Dubai, which is the region's financial, commercial and aviation hub, said Gert-Jan Schenk, McAfee president for EMEA.
"It's where the wealth and critical infrastructure is concentrated," he said.
The "Shamoon" virus last year targeted Saudi Aramco, the world's largest oil company, damaging about 30,000 computers in what may have been the most destructive attack against the private sector.
© Oscar O’Connor Consulting Limited 2014
Programme Design
Make a positive difference to the organisation
Address security and continuity as core requirements
Use business metrics to measure impact
© Oscar O’Connor Consulting Limited 2014
The National (UAE)3 March 2014
Businesses in the Middle East are facing a growing risk of cyber-attacks, says an annual security report released on Monday.Total global threats have reached their highest recorded level, increasing 14 per cent from 2012 to last year, according to the Cisco 2014 Annual Security Report.
A sample of 30 of the world’s largest Fortune 500 companies generated visitor traffic to websites that host malware, with a sharp rise in malware attacks on the Middle East’s oil and gas sector.
“Organisations across the Middle East and Africa must realise that it is no longer if they will be targeted by cyber-attacks, but when,” said Rabih Dabboussi, managing director at Cisco UAE. “Chief information security officers face growing pressure to protect terabytes of data on an increasingly porous network… all in the wake of shrinking budgets and leaner IT teams.”
© Oscar O’Connor Consulting Limited 2014
Conclusions
Business ValueOutputs have no intrinsic valueOutcomes DO
RespectWITH not TOWho makes the changes?
NavigateDon’t dictate
© Oscar O’Connor Consulting Limited 2014
Thank [email protected]
http://www.linkedin.com/in/oscaroconnor@oscarpjoconnor
http://www.oscaroconnor.eu