Ministry of Social Affairs and Health 1 Basic course of Corporate Security Teemupekka Virtanen Helsinki University of Technology Telecommunication Software.

Ministry of Social Affairs and Health1

Basic course of Corporate Security

Teemupekka VirtanenHelsinki University of Technology

Telecommunication Software and Multimedia Laboratory

[email protected]


1. Lecture The arrangements of the course The content of the course Introduction to security


The lecturer Teemupekka Virtanen, PhD, MSec MSc in EE, PhD in CS Programming and design in several companies Information security specialist in the Prime minister’s office The head of information security in the Finnish military The head of security in Alma Media corporation The professor of telecommunucation software (Security on

the Intenet) A Senior advisor in Ministry of Social affairs and Health

The national head of security in health The security adviser in eHealth projects


The goal of the course A general level course in security No prerequirements Introduction to the security in organizations ”Something every engineer should know about

security” No computer science


The lectures

Lectures are in III term on Tuesdays 8-10, T3 Thursdays 8-10, T3

The lecturer: Teemupekka Virtanen Can be met during the lectures No other staff

Language: English


The material

The material will be delivered as handouts Slides ?? The other material

There is no good book in this area available


Passing the course

An examination Lectures Additional material in handouts

March, May, October


The minor in corporation security Has been cancelled

It is not possible to start anymore Those who have started can finish it

CS background is not required Brings security view to the major Leads to head of security position The courses

T-110.5600 Introduction to corporate security T-110.5610 Security in personnel management and premises T-110.5620 Development processes in information security T-110.5690 Seminar in corporate security Number of optional courses


About words

In the Finnish language there is only one word for both security and safety

In this course both of these words are used In this course both of these words belong to this context as a

part of function we called corporate security


Security in organizations

Working conditions

Environmental protection

Product safety

Information security

Fraud prevention

Crime prevention

Fire protection

Public safety

Continuity

Bookkeeping

Traffic security

Risk management


The content of the course

1. Introduction 20.1.

2. Security management and security in an organization, 22.1 .

3. Legislation and authorities, 27.1.

4. Risk management, 29.1.

5. Physical security, 3.2.

6. Personnel security, 5.2.

7. Fire protection and civil safety, 10.2.


The content cont.

8. Security in business processes, 12.2.

9. Information security, 24.2.

10. Operational security 26.2.

11. Business continuity, 3.3

12. Conclusion and current topics, 5.3.

There is a break on week 8 (16.-20.2.)


Views to security


A legal view

Security is based on laws Legislation protects individuals and organizations against

various Security is the function to keep these rights and protects

people and property Security is prevention by guarding and locks


A quality view

There are incidents that cause disturbance in work Security meand preventing such incidents Security means changing target from correction to

prevention Security is prevention by designing processes and

working conditions


A risk view

Business means taking risk Risk is the key factor to success Avoiding risk means avoiding losses but then there is no win neither Even breaking laws is taking a risk Security means managing risk so that it can be handled Security is prevention by gambling


A brand view

Security is a way to make a difference Customers exist who want higher security and are willing to pay

for it Personal safety (cars) Exact deliveries (electricity) Secrecy (military)

In this segment price is not the main argument to select the product Security is an enabler to find a new market segment


A private view

Prevention of surprise negative incidents A protection of health and property Economical continuity Security is not rational but emotions


Different approaches to security in an organization

A lawyer view Security means a minimal set of requirements set from outside

Legislation, agreements There is no interest in security

An engineer vies Security means efficiency by prevention harmful incidents

An economistic view Security means new sell and new market area Security is a brand


Trends


Security situation in Finland

The level of violency has always been high in Finland The number of legal weapons is one of the highest in the

world per capita One of the biggest gaps in living standards is between

Finland and Russia Finland is target for all kind of activities An another criminal culture


Trends in society

Unexpected violency has incresed Criminal activities concentrate on certain people and places Gangs Internet groups Internatinal aspects

Criminals Organizations


Trends in companies

The requirements for efficiency increase There must be no stops There are no spare resources

Short terms Design in quarters

Internationalization Common procedure in every country New competitors


Criminal risks experienced by companies About 1/3 of the companies feel that risks has been

incresed Especially in big companies Especially by other staff than CEO, CAO and CSO Especially in shops and services

About 2/3 feel that risks have not changed

Source: The Chamber of Commerce, Yritysten rikosturvallisuus 2005


Examples protection profiles


Security in the military

Information secrecy Plans must be kept secret for decades

Protection of property Handguns are valuable in criminal markets

Operational safety Avoiding all kind of accidents

Fire protection Ammunition, bunkers


Security in a media company

Rapid deliveries A news is rottening fast

A reputation as a trustworthy agent The quality of news

Sabotage and terrorism A high profile target

Staff safety There are always people who don’t like certain news


Security in healthcare Privacy protection

Health information is very sensitive The quality of treatment

High availability of all resources The quality of information

All kinds of customers Kids (parents) Elder (kids)

Prevention of thiefs and blackmailing Narcotics

Ministry of Social Affairs and Health 1 Basic course of Corporate Security Teemupekka Virtanen Helsinki University of Technology Telecommunication Software.

Documents

security management

corporation security

personnel security

corporate security slide

security adviser

security view

physical security

ministry of social affairs