Cybersecurity is a Team Sport

Transcription

1 Cybersecurity is a Team Sport Cyber Security Summit at Loyola Marymount University - October Dr. Robert Pittman, CISM Chief Information Security Officer National Cyber Security Awareness Month October 2015 October 11,

2 County of Los Angeles Background The County Largest populous County in the United States of America Serving 10+ million population speaking 140 languages Equivalent to 8 th largest state just behind Ohio and ahead of Michigan Spans 4,043 square miles Comprised of 88 cities with more than 65% of County is unincorporated 19 th largest economy in the world 1

3 County of Los Angeles Background (2) The Government Five-member bipartisan elected Board of Supervisors 34 departments and over 140 commissions ~108,000 employees $28.7 billion FY Final Adopted Budget Serviced 700,000 patients, manage 14 major dams, care for 18,000 inmates/day, responded to over 300,000 emergency calls, 70 million visits to county beaches, cash assistance to 502,000 general relief recipients, maintain over 4,200 miles of roads and streets, issued 52,000 marriage licenses, loaned 16 million books, and collect taxes for 2.6 million households and commercial properties 2

4 Transformation in the County September 13, 2001 a transformation occurred 3

5 Is China our Friend or Foe? 4

6 Cyber Attacks 5

7 Life, Death, Taxes, and Breaches 6

8 Life, Death, Taxes, and Breaches (2) California on guard after cyber attacks on elections databases in two states voter arrives to cast her ballot in the Arizona primary in March. (Matt York / AP) 7

9 Life, Death, Taxes, and Breaches (3) 8

10 Life, Death, Taxes, and Breaches (4) 9

11 Who Participates in Cyber Crime? 10

12 Data Breaches Root Cause 11

13 Countywide Information Security Program 12

14 Countywide Information Security Program (2) Board of Supervisors CEO Chief Info Security Officer HW/SW Tools Security Dept s Info Security Officer CERT Policies/ Standards ISD/ITS Security Division 13

15 Countywide Information Security Program (3) 14

16 Countywide Information Security Program (4) 15

17 County s Cyber Security Incidents 16

18 County s Cyber Security Incidents (2) Incident Categories JAN FEB MAR APR MAY JUN JUL AUG SEP OCT NOV DEC YTD Malware Infection Cease and Desist Order Lost/Stolen Electronic Device Data Breach (Reportable and Non- Reportable) Hacking/Unauthorized Access Social Engineering Child Pornography TOTALS: Incident Categories JAN FEB MAR APR MAY JUNE JUL AUG SEP OCT NOV DEC YTD Malware Infection Cease and Desist Order Lost/Stolen Electronic Device Data Breach Hacking/Unauthorized Access Social Engineering Child Pornography TOTALS:

19 County IT Security Initiatives FY Board Motion Data-at-Rest County workstations ~90,000 (complete) Contractors workstations and portable devices (New Board Policy #5.200) Software License Consolidation for Endpoint Management Enterprise Mobility Suite Cyber Disruption Response Plan Enterprise IT Security Awareness & Training Content Phishing Campaign Cyber Security Liability Risk Insurance National Cyber Security Awareness Month October 2016 October 11,

20 CISP Incident Response National Cyber Security Awareness Month October 2016 October 11,

21 CISP Incident Response (2) National Cyber Security Awareness Month October 2016 October 11,

22 CISP Incident Response (3) Signal or Noise County s Gateway April 1 to Sept. 30, 2016 INBOUND Total Threat Messages 88.80% 278,819,581 Total Graymails 5.40% 16,982,166 Clean Messages 5.80% 18,349,176 Total Attempted Messages 314,150,923 National Cyber Security Awareness Month October 2016 October 11,

23 CISP Incident Response (4) Signal or Noise County s Web Application Firewall Year 2016 Category April May June July August September TRB 983,629 1,012, , , , ,585 NTRB 354, ,190 1,127, , , ,089 NBFR 2,688,621 4,283,184 2,512,230 4,270,160 2,257,354 2,234,008 MONTHLY TOTAL 4,026,307 6,256,737 4,346,545 5,702,339 3,495,283 3,232,682 National Cyber Security Awareness Month October 2016 October 11,

24 County Digest October 2016 National Cyber Security Awareness Month October 2016 October 11,