IAS SIR WENDELL
INFORMATION SECURITY AND CYBER
SECURITY
INFORMATION SECURITY
IS THE PRACTICE OF PROTECTING
INFORMATION BY MITIGATING
INFORMATION RISKS
INFORMATION SECURITY OBJECTIVES
CONFIDENTIALITY INFORMATION IS
NOT DISCLOSED TO UNAUTHORIZED
INDIVIDUALS, ENTITIES AND PROCESS.
INTEGRITY MAINTAINING ACCURACY
AND COMPLETENESS OF DATA
AVAILABILTY INFORMATION MUST BE
AVAILABLE WHEN NEEDED.
OTHER PRINCIPLE THAT GOVERNS
INFORMATION SECURITY
PROGRAMS.
NON REPUDATION ONE PARTY
CANNOT DENY RECEIVING A
MESSAGE.
AUTHENTICITY VERIFYING THAT
USERS ARE WHO THEY SAY THEY ARE
AND THAT EACH INPUT ARRIVING AT
DESTINATION IS FROM A TRUSTED
SOURCE.
ACCOUNTABILITY IT SHOULD
POSSIBLE TO TRACE ACTIONS.
USERS OF INFORMATION SECURITY
01 CONFIDENTIALITY KEEPING
SENSITIVE INFORMATION
CONFIDENTIAL
02 INTEGRITY MAINTAINING THE
ACCURACY AND CONSISTENCY OF
DATA,
03 AVAILABILITY ENSURING THAT
AUTHORIZED USERS HAVE ACCESS TO
THE INFORMATION THEY NEED,
WHEN THEY NEED IT.
04 COMPLIANCE MEETING
REGULATORY AND LEGAL
REQUIREMENTS, SUCH AS THOSE
RELATED TO DATA PRIVACY AND CYBER SECURITY IS THE PRACTICE OF
PROTECTION. PROTECTING COMPUTERS, MOBILE
DEVICES, SERVERS, ELECTRONIC
05 RISK MANAGEMENT IDENTIFYING
SYSTEMS, NETWORKS, AND DATA
AND MITIGATING POTENTIAL
SECURITY THREATS TO PREVENT
HARM TO THE ORGANIZATION..
TYPES OF CYBER SECURITY
06 DISASTER RECOVERY DEVELOPING
AND IMPLEMENTING A PLAN TO 01 APPLICATION SECURITY MOST OF
QUICKLY RECOVER FROM DATA LOSS THE APPS THAT WE USE ON OUR
OR SYSTEM FAILURES. CELL- PHONE ARE SECURED
07 AUTHENTICATION VERIFYING THE 02 NETWORK SECURITY GUARD YOUR
IDENTITY OF USERS INTERNAL NETWORK
08 ENCRYPTION PROTECTING 03 CLOUD SECURITY IT ENHANCES
SENSITIVE INFORMATION PRIVACY AND SAVES DATA ON THE
CLOUD
09 NETWORK SECURITY PROTECTING
COMPUTER NETWORKS FROM 04 MOBILE SECURITY MOBILE IS THE
UNAUTHORIZED ACCESS VERY COMMON GADGETS WE USE
DAILY
10 PHYSICAL SECURITY PROTECTING
INFORMATION SYSTEMS AND THE 05 CRITICAL INFRASTRUCTURE
INFORMATION SECURITY THE FAILURE OR BLACKOUT
ISSUES OF INFORMATION SECURITY 06 INTERNET OF THINGS SECURITY
THESE DEVICES ARE EASY TARGETS
01 CYBER THREATS FOR ATTACKERS USING AUTOMATED
SCRIPTS
INCREASING SOPHISTICATION OF
CYBER ATTACKS. IMPORTANCE OF CYBER SECURITY
BE
02 HUMAN ERROR 01 CYBER CRIME IS ON RISING
PEOPLE CAN INADVERTENTLY THERE ARE 4000 ROUGHLY CYBER
ATTACKS EVERY DAY. ONE OF THE
03 INSIDER THREATS
REASONS CYBERCRIME IS INCREASING
EMPLOYEES WITH ACCESS TO IS BECAUSE IT IS CHEAP, FAST, AND
SENSITIVE INFORMATION CAN POSE A HIGHLY PROFITABLE COMPARED TO
RISK OTHER TYPES OF CRIME, WHICH IS
WHY CYBERCRIMINALS ARE HEADED.
04 LEGACY SYSTEM OLDER
INFORMATION SYSTEMS MAY NOT 02 DAMAGE IS SIGNIFICANT
HAVE THE SECURITY FEATURES CYBERCRIME CAN COST
ORGANIZATIONS CAN CAUSE
05 COMPLEXITY INCREASING
MILLIONS OF DOLLARS IN DAMAGE
COMPLEXITY OF INFORMATION
03 CYBERSECURITY BUILDS TRUST
06 MOBILE AND IOT DEVICES
CYBERSECURITY AFFECTS TRUST WITH
DEVICES CREATES NEW SECURITY CUSTOMERS AND EMPLOYEES. WHEN
CHALLENGES PEOPLE FEEL THAT THEIR
INFORMATION IS NOT BEING
07 INTEGRATION WITH THIRD-PARTY PROPERLY SECURED AND KEPT
SYSTEMS MAY HAVE SECURITY PRIVATE, THEY LOSE TRUST IN THE
VULNERABILITIES. BRAND, PRODUCT, AND SERVICES..
08 DATA PRIVACY 04 OUR IDENTITIES PROTECT OUR
DATA USER IDENTITY NOW PROTECTS
PROTECTING PERSONAL AND
BILLIONS OF POINTS OF DATA.
SENSITIVE INFORMATION
05 EVERY ORGANIZATION HAS
09 GLOBALIZATION MAKES IT MORE
VULNERABILITIES AS ORGANIZATIONS
DIFFICULT TO SECURE
EVOLVE, MERGE, AND GROW OVER
INFORMATION,,
TIME, THEIR NETWORKS AND
SYSTEMS BECOME MORE
IAS SIR WENDELL
COMPLICATED, AND THINGS MAY SLIP
THROUGH THE CRACKS.

RISK CYBER RISK IS A POTENTIAL

CYBER ATTACK IS A DELIBERATE CONSEQUENCE OF THE LOSS OR
ATTEMPT BY EXTERNAL OR INTERNAL DAMAGE OF ASSETS OR DATA
THREATS OR ATTACKERS CAUSED BY A CYBER THREAT. RISK
CAN NEVER BE COMPLETELY
• MALWARE
REMOVED.
 RANSOMWARE
 INJECTION ATTACKS TYPES OF RISKS ASSETS AND ASSETS TYPES
• PHISHING
01 EXTERNAL EXTERNAL CYBER RISKS ASSET AN ASSET CAN BE DEFINED AS
 PRIVILEGE ESCALATIONS
ARE THOSE WHICH COME FROM AN IMPORTANT RESOURCE THAT AN
• UNPATCHED VULNERABLE
OUTSIDE AN ORGANIZATION, SUCH INDIVIDUAL, COMPANY, OR NATION
SOFTWARE
AS CYBERATTACKS, PHISHING, HOLDS WHICH HAS AN ECONOMIC
THREAT A CYBER THREAT IS A RANSOMWARE, DDOS ATTACKS, ETC. VALUE, THAT CAN GENERATE PROFIT
MALICIOUS ACT THAT SEEKS TO STEAL IN THE FUTURE.
02 INTERNAL INTERNAL CYBER RISKS
OR DAMAGE DATA OR DISCOMPOSE
COME FROM INSIDERS. CLASSIFICATION OF ASSETS
THE DIGITAL NETWORK OR SYSTEM. 
RESPONSES TO INFORMATION 01 CONVERTIBILITY
TYPES OF THREATS
SECURITY THREATS
IT SHOWS HOW EASILY AN ASSET CAN
01 INTENTIONAL MALWARE,
01 REDUCE OR MITIGATE BE LIQUIDATED INTO CASH.
PHISHING, AND ACCESSING
IMPLEMENT SAFEGUARDS AND
SOMEONE'S ACCOUNT ILLEGALLY. 02 PHYSICAL EXISTENCE
COUNTERMEASURES TO ELIMINATE
02 UNINTENTIONAL VULNERABILITIES OR BLOCK THREATS. IT SHOWS WHETHER AN ASSET IS
TANGIBLE OR INTANGIBLE.
UNINTENTIONAL THREATS ARE 02 ASSIGN OR TRANSFER
CONSIDERED HUMAN ERRORS, FOR 03 USAGE
PLACE THE COST OF THE THREAT
EXAMPLE, FORGETTING TO UPDATE
ONTO ANOTHER ENTITY OR IT FURTHER CATEGORIZES THE
THE FIREWALL 
ORGANIZATION SUCH AS INSURANCE AVAILABLE ASSETS, BASED ON THEIR
03 NATURAL OR OUTSOURCING. USAGE.

NATURAL DISASTERS CAN ALSO 03 ACCEPT TYPES OF AN ASSETS

DAMAGE THE DATA, THEY ARE
KNOWN AS NATURAL THREATS
VULNERABILITY
IN CYBERSECURITY, A VULNERABILITY
IS A FLAW IN A SYSTEM'S DESIGN,
SECURITY PROCEDURES, INTERNAL
CONTROLS, 
TYPES OF VULNERABILITY
01 NETWORK IS CAUSED WHEN
THERE ARE SOME FLAWS IN THE
NETWORK'S HARDWARE OR
SOFTWARE.
02 OPERATING SYSTEM GRANTS
EVERY PROGRAM/USER TO HAVE
FULL ACCESS TO THE COMPUTER.
03 HUMAN USERS' NEGLIGENCE CAN
CAUSE VULNERABILITIES IN THE
SYSTEM.
04 PROCESS SPECIFIC PROCESS
CONTROL CAN ALSO CAUSE
VULNERABILITIES IN THE SYSTEM.
EVALUATE IF THE COST OF THE
COUNTERMEASURE OUTWEIGHS THE
POSSIBLE COST OF LOSS DUE TO THE
THREAT.
RISK CATEGORY SCORES
THE GOAL OF RISK MANAGEMENT IS
TO DETERMINE THE EXACT
LIKELIHOOD THAT A SECURITY EVENT
MIGHT HAPPEN AND THE EXPECTED
FINANCIAL DAMAGE EACH TIME.
01 CURRENT ASSETS
CURRENT ASSETS ARE ALSO OFTEN
REFERRED TO AS SHORT-TERM
ASSETS IN ACCOUNTING TERMS, AS
CURRENT ASSETS ARE HELD BY A
COMPANY FOR A SHORT PERIOD.
02 INTANGIBLE ASSETS
INTANGIBLE ASSETS ARE SOME OF
THE ASSETS, THAT DO NOT HAVE A
PHYSICAL PRESENCE BUT ARE STILL
QUITE VALUABLE FOR A COMPANY.
03 FIXED ASSETS
A FIXED ASSET IS A LONG-TERM
ASSET, THAT HOLDS FOR MANY YEARS
(MORE THAN A YEAR).
04 FINANCIAL ASSET - REFER TO THE
INVESTMENT MADE IN THE STOCKS
OF OTHER COMPANIES, BANK
INVESTMENTS, PREFERRED EQUITY,
CORPORATE AND SOVEREIGN BONDS
ETC.
IAS SIR WENDELL
REGISTERED MOBILE NUMBER OR
PHONE NUMBER. 

04 SINGLE SIGN-ON SINGLE SIGN-ON

OR SSO IS A WAY TO ENABLE ACCESS
AUTHENTICATION AND TO MULTIPLE APPLICATIONS WITH A
AUTHORIZATION SINGLE SET OF CREDENTIALS.

AUTHENTICATION - IS THE PROCESS 05 SOCIAL AUTHENTICATION

OF IDENTIFYING SOMEONE'S
SOCIAL AUTHENTICATION DOES NOT
IDENTITY BY ASSURING THAT THE
REQUIRE ADDITIONAL SECURITY;
PERSON IS THE SAME AS WHAT HE IS
INSTEAD, IT VERIFIES THE USER WITH
CLAIMING FOR.
THE EXISTING CREDENTIALS FOR THE
TYPES OF AUTHENTIFICATION AVAILABLE SOCIAL NETWORK.

01 SINGLE-FACTOR AUTHENTICATION AUTHORIZATION IS THE PROCESS OF

SINGLE-FACTOR AUTHENTICATION IS
THE SIMPLEST WAY OF
AUTHENTICATION. IT JUST NEEDS A
USERNAME AND PASSWORD TO
ALLOWS A USER TO ACCESS A
SYSTEM.
02 TWO-FACTOR AUTHENTICATION
AS PER THE NAME, IT IS TWO-LEVEL
SECURITY; HENCE IT NEEDS TWO-STEP
VERIFICATION TO AUTHENTICATE A
USER. IT DOES NOT REQUIRE ONLY A
USERNAME AND PASSWORD.
03MULTI-FACTOR AUTHENTICATION
THIS IS THE MOST SECURE AND
ADVANCED LEVEL OF
AUTHORIZATION. IT REQUIRES TWO
OR MORE THAN TWO LEVELS OF
SECURITY FROM DIFFERENT AND
INDEPENDENT CATEGORIES.
FAMOUS AUTHENTICATION
TECHNIQUES
01PASSWORD-BASED
AUTHENTICATION
IT IS THE SIMPLEST WAY OF
AUTHENTICATION. IT REQUIRES THE
PASSWORD FOR THE PARTICULAR
USERNAME.
03 2FA/MFA
2FA/MFA OR 2-FACTOR
AUTHENTICATION MULTI-FACTOR
AUTHENTICATION IS THE HIGHER
LEVEL OF AUTHENTICATION.
02 PASSWORD LESS
AUTHENTICATION
IN THIS TECHNIQUE, THE USER
DOESN'T NEED ANY PASSWORD;
INSTEAD, HE GETS AN OTP (ONE-TIME
PASSWORD) OR LINK ON HIS
GRANTING SOMEONE TO DO
SOMETHING.
* IT DEFINES THAT WHAT DATA AND
INFORMATION ONE USER CAN
ACCESS. IT IS ALSO SAID AS AUTHZ.
*THE AUTHORIZATION USUALLY
WORKS WITH AUTHENTICATION SO
THAT THE SYSTEM COULD KNOW
WHO IS ACCESSING THE
INFORMATION.
AUTHORIZATION TECHNIQUE
01 ROLE-BASED ACCESS CONTROL
RBAC OR ROLE-BASED ACCESS
CONTROL TECHNIQUE IS GIVEN TO
USERS AS PER THEIR ROLE OR PROFILE
IN THE ORGANIZATION.
02 JSON WEB TOKEN JSON WEB
TOKEN OR JWT IS AN OPEN
STANDARD USED TO SECURELY
TRANSMIT THE DATA BETWEEN THE
PARTIES IN THE FORM OF THE JSON
OBJECT.
03 OPENID AUTHORIZATION
IT HELPS THE CLIENTS TO VERIFY THE
IDENTITY OF END- USERS ON THE
BASIS OF AUTHENTICATION.
04 SAML
SAML STANDS FOR SECURITY
ASSERTION MARKUP LANGUAGE. IT IS
AN OPEN STANDARD THAT PROVIDES
AUTHORIZATION CREDENTIALS TO
SERVICE PROVIDERS.
05 OAUTH
OAUTH IS AN AUTHORIZATION
PROTOCOL, WHICH ENABLES THE API
TO AUTHENTICATE AND ACCESS THE
REQUESTED RESOURCES.