ISO in the world today

Transcription

1 ISO in the world today 1

2 Agenda ISO worldwide Why ISO Framework to implement ISO

3 ISO worldwide Source: ISO Annual Survey 3

4 ISO worldwide Number of Certificates Year TOTAL Africa Central / South America North America Europe East Asia and Pacific Central and South Asia Middle East Regional share - in % Year TOTAL 100% 100% 100% 100% 100% 100% 100% 100% 100% Africa 0.1% 0.1% 0.2% 0.4% 0.3% 0.2% 0.3% 0.4% 0.3% Central / South America 0.3% 0.5% 0.8% 0.8% 0.7% 0.9% 1.0% 1.2% 1.2% North America 1.4% 1.4% 2.3% 2.5% 2.1% 2.5% 2.8% 3.2% 3.5% Europe 18.4% 18.5% 23.5% 27.5% 30.7% 31.1% 32.5% 35.6% 36.3% East Asia and Pacific 72.6% 71.8% 62.8% 57.2% 56.2% 55.2% 53.1% 48.6% 47.2% Central and South Asia 6.6% 6.7% 9.1% 10.1% 8.5% 8.5% 8.5% 9.0% 9.4% Middle East 0.6% 0.9% 1.4% 1.6% 1.4% 1.6% 1.7% 2.0% 2.1% Source: ISO Annual Survey 4

5 ISO worldwide Annual growth - absolute numbers Year TOTAL Africa Central / South America North America Europe East Asia and Pacific Central and South Asia Middle East Annual growth - in % Year TOTAL 33% 20% 40% 21% 12% 13% 14% 7% Africa 67% 60% 194% -2% -13% 60% 55% -18% Central / South America 111% 89% 39% 17% 28% 35% 34% 2% North America 42% 89% 52% 2% 32% 27% 29% 17% Europe 35% 52% 64% 35% 13% 21% 25% 10% East Asia and Pacific 32% 5% 27% 19% 10% 8% 4% 4% Central and South Asia 36% 62% 55% 2% 13% 11% 20% 13% Middle East 92% 80% 61% 6% 28% 19% 36% 14% Source: ISO Annual Survey 5

6 ISO worldwide Top 10 countries for ISO/IEC growth United Kingdom China India Australia United States of America 98 6 Ireland 77 7 Italy 69 8 Germany 59 Source: ISO Annual Survey 6

7 ISO worldwide Top five industrial sectors for ISO/IEC certificates Information technology Other Services Construction Transport, storage and communication Electrical and optical equipment 287 Source: ISO Annual Survey 7

8 ISO worldwide Top 10 countries for ISO/IEC certificates Japan United Kingdom India China Italy Romania Taipei, Chinese Spain United States of America Germany 640 Source: ISO Annual Survey 8

9 ISO worldwide Why only 664 In the USA? Local Frameworks & Control Catalogues Few Frameworks or Control Catalogues 9

10 Why ISO Sony Pictures - a major online attack that resulted in employees personal data and corporate correspondence being leaked JPMorgan Chase & Co. a data breach that affected 76 million households and seven million small businesses 2015 Cost of Data Breach Study: Global Analysis IBM & Ponemon Institute 10

11 Why ISO Global study at a glance 350 companies in 11 countries $3.79 million is the average total cost of a data breach 23% increase in total cost of data breach since 2013 $154 is the average cost per lost or stolen record 12% percent increase in per capita cost since Cost of Data Breach Study: Global Analysis IBM & Ponemon Institute 11

12 Why ISO The three major reasons contributing to a higher cost of data breach in 2015: Cyber attacks have increased in frequency and in the cost to remediate the consequences The consequences of lost business are having a greater impact on the cost of data breach Data breach costs associated with detection and escalation increased 2015 Cost of Data Breach Study: Global Analysis IBM & Ponemon Institute 12

13 Why ISO Hackers and criminal insiders cause the most data breaches Forty-seven percent of all breaches in this year s study were caused by malicious or criminal attacks The loss of customers increases the cost of data breach Business continuity management plays an important role in reducing the cost of data breach 2015 Cost of Data Breach Study: Global Analysis IBM & Ponemon Institute 13

14 Why ISO Cyber Terrorism Cyber Wars Cyber Crime (surpasses old weapons and drugs) 14

15 Why ISO Some other threats out there... Ransomware Worms Spyware Trojan horses 15

16 Why ISO What about GRC Compliance??? Legal/Regulatory requirements International encryption laws 16

17 Why ISO Why ISO 27001? It is the only internationally recognized standard Powerful framework/tool to manage information security Must have for global presence and demanding market Improves processes and reduces costs Allows better management decisions Manages risks proactively Improves resilience and business continuity Increases competitiveness 17

18 ISO is a Framework of processes and procedures 18

19 4 Context of the Organization 4 - CONTEXT OF THE ORGANIZATION SCOPE & BOUNDARIES LEGAL REGULATORY CONTRACTUAL 19

20 5 Leadership & Commitment 20

21 6 Planning 21

22 7 Support 22

23 8 Operation 23

24 9 Performance Evaluation 24

25 10 Improvement 25

26 26

27 Roadmap to implement ISO Get Certified!!! 27

28 Questions? 28