CYBER SECURITY AWARENESS IN THE MARITIME INDUSTRY
|
|
|
- Paul Fowler
- 5 years ago
- Views:
Transcription
1 CYBER SECURITY AWARENESS IN THE MARITIME INDUSTRY A joint production by DNV GL and GARD 1 SAFER, SMARTER, GREENER
2 STRUCTURE STATUS ON CYBER SECURITY IN MARITIME SHIPPING Risk scenarios (threats) Best practices for you and your company DNV GL and Gard and cyber security 2
3 Safety in shipping today heavily depends on cyber systems YEARS YEARS
4 Cyber risks are present and migrating to the OT world Information technology (IT) Operational technology (OT) 2,600 2,400 2,200 2,000 1,800 1,600 1,400 1,200 1, % Attacks on industrial control systems Source: AV-TEST Institute, Germany & IBM Managed Security Services OT: Operational Technology such as Industrial Control Systems, SCADA, PLCs, Sensors SCADA : Supervisory Control and Data Acquisition (Operator control and monitoring systems) 4
5 Cyber in the news 5
6 Incident trends and regulation development? Drilling rig infected with malware Pirate Cyber Attack GPS jamming /spoofing Hacking of cargo tracking system U.S. Port hacker attack Bulk carrier SWB shuts down ransomeware Major shipping company infected by ransomeware Prepare for the unknown ISO 27001/27002 IEC January BIMCO Cyber security guideline IMO guidelines on cyber security onboard ships July NIS directive July IMO guidelines on maritime cyber risk management January DNV GL Cyber security Type Approval May EU GDPR July DNV GL class notation September DNVGL-RP
7 Reported incidents around the world is increasing Loss of fuel control and ballast water valves due to ECDIS update GPS jamming and spoofing VSAT hacking using common login AIS spoofing PMS system shore and vessel attack ECIDS ransomware and chart spoofing Pirate attack supported by cyber attack Loss of main switchboard due to ransomware Malware allows full access to vessel systems Hackers took full control of navigation systems for 10 h Hacking of cargo tracking system for smuggling purposes NotPetya cause Maersk upto USD 300m loss 7
8 STRUCTURE Status on cyber security in maritime shipping RISK SCENARIOS (THREATS) Best practices for you and your company DNV GL and Gard and cyber security 8
9 It is not only about software and technology The three pillars of cyber security implementations PROCESS Management systems Governance frameworks Policies and procedures Vendor/Third party contract follow up Audit regimes PEOPLE Training and awareness Professional skills and qualifications Written procedures Authorizations Physical security TECHNOLOGY System design, design review Software configurations Inspection/verification Testing Functional testing Vulnerability scanning Penetration test 9
10 Threat agents Insiders Outsiders Attackers come in many guises Why? Motivation Disruption Espionage Financial Hacktivists Nation states Criminal organisations Terrorists Hackers and Amateurs Criminal aims Disgruntled employees Unintentional 10
11 Some common threat scenarios for ship and crew Social engineering/phishing Removable media/external hardware Mixing isolated and open networks Tampering with ECDIS, navigation systems Ransomware (malware) Denial of Service (DoS/DDoS) Data filtration/data theft Unintentional ("working accident", not following procedures) Bad intentions, planned 11
12 Threat scenario #1 SOCIAL ENGINEERING/PHISHING One of the most common forms of cyber crime is social engineering This is the art of manipulating people by using methods like urgency, fear and curiosity Reveals confidential information that can be used to gain unauthorized access to personal or company systems 12
13 Threat scenario #2 REMOVABLE MEDIA/EXTERNAL HARDWARE External hard drives such as USB sticks, camera memory cards and smart phones: perfect storage tools for anyone to spread their malware and virus making it possible to physically cross network barriers that are otherwise protected by network firewalls. 13
14 Threat scenario #3 MIXING ISOLATED AND OPEN NETWORKS Connecting a personal wireless router or PC to the isolated network reserved for operational equipment is a major security risk. Hackers can invade your systems by exploiting an open wireless network, or one with low level security. They can literally sit outside your ship s physical location and access critical onboard systems through wireless networks. 14
15 Threat scenario #4 TAMPERING WITH NAVIGATION SYSTEM Unauthorized access and manipulation of operational systems can create dangerous situations The navigation system can also be manipulated by electronic GPS spoofing devices sending incorrect GPS signals, telling you that you are in a different position than what is actually the case This type of attack does not require access to the vessel s network or internal systems 15
16 Threat scenario #5 RANSOMWARE Ransomware encrypts files on a computer and demands that you pay to unlock your files Once the malicious software has infected one computer, be it a personal or company computers it may spread to others connected to the same network, quickly making it impossible to perform common tasks 16
17 Threat scenario #6 DENIAL OF SERVICE (DoS/DDoS) A distributed denial of service (DDoS) attack is when an attacker, attempts to make it impossible for a service to be delivered DoS/DDoS attacks work by drowning a system with data requests The result is unavailable internet bandwidth, and CPU and RAM capacity becomes overwhelmed/unavailable 17
18 Threat scenario #7 DATA THEFT When an individual s or company s data is copied, transferred, or retrieved from a computer or server without authorization Attack mimics normal data traffic and can be very difficult to detect Data theft is achieved by hackers when systems rely on vendor-set, common, or easy-to-crack passwords 18
19 STRUCTURE Status on cyber security in maritime shipping Risk scenarios (threats) BEST PRACTICES FOR YOU AND YOUR COMPANY DNV GL and Gard and cyber security 19
20 Best practices how to avoid cyber mishaps onboard your ship/in your company 1. Think before you click! 2. Research the facts behind s and their attachments! 3. Make sure external drives and USBs are clean! 4. Be aware when third parties enter your systems or data! 5. Protect your passwords! 6. Never connect personal items to the ship critical systems. 7. Never use external wi-fi for company s or downloads unless protected by VPN! 8. Learn how to install and use two step authentication. 9. Learn how backup and restore is done onboard your ship. 10. Always report errors and mistakes. 11. Educate yourself on cyber risks and how it affects your ship, your colleagues and you personally! 20
21 1.Think before you click! 2.Research the facts behind s and their attachments! 3. Make sure external drives and USBs are clean! 4. Be aware when third parties enter your systems or data! 5. Protect your passwords! 6. Never connect personal items to the ship critical systems. 7. Never use external wi-fi for company s or downloads unless protected by VPN! 8. Learn how to install and use two step authentication. 9. Learn how backup and restore is done onboard your ship. 10. Always report errors and mistakes. 11. Educate yourself on cyber risks and how it affects your ship, your colleagues and you personally! 21
22 1. Think before you click! 2. Research the facts behind s and their attachments! 3.Make sure external drives and USBs are clean! 4. Be aware when third parties enter your systems or data! 5. Protect your passwords! 6. Never connect personal items to the ship critical systems. 7. Never use external wi-fi for company s or downloads unless protected by VPN! 8. Learn how to install and use two step authentication. 9. Learn how backup and restore is done onboard your ship. 10. Always report errors and mistakes. 11. Educate yourself on cyber risks and how it affects your ship, your colleagues and you personally! 22
23 1. Think before you click! 2. Research the facts behind s and their attachments! 3. Make sure external drives and USBs are clean! 4.Be aware when third parties enter your systems or data! 5. Protect your passwords! 6. Never connect personal items to the ship critical systems. 7. Never use external wi-fi for company s or downloads unless protected by VPN! 8. Learn how to install and use two step authentication. 9. Learn how backup and restore is done onboard your ship. 10. Always report errors and mistakes. 11. Educate yourself on cyber risks and how it affects your ship, your colleagues and you personally! 23
24 1. Think before you click! 2. Research the facts behind s and their attachments! 3. Make sure external drives and USBs are clean! 4. Be aware when third parties enter your systems or data! 5.Protect your passwords! 6. Never connect personal items to the ship critical systems. 7. Never use external wi-fi for company s or downloads unless protected by VPN! 8. Learn how to install and use two step authentication. 9. Learn how backup and restore is done onboard your ship. 10. Always report errors and mistakes. 11. Educate yourself on cyber risks and how it affects your ship, your colleagues and you personally! 24
25 1. Think before you click! 2. Research the facts behind s and their attachments! 3. Make sure external drives and USBs are clean! 4. Be aware when third parties enter your systems or data! 5. Protect your passwords! 6.Never connect personal items to the ship critical systems. 7.Never use external wi-fi for company s or downloads unless protected by VPN! 8. Learn how to install and use two step authentication. 9. Learn how backup and restore is done onboard your ship. 10. Always report errors and mistakes. 11. Educate yourself on cyber risks and how it affects your ship, your colleagues and you personally! 25
26 1. Think before you click! 2. Research the facts behind s and their attachments! 3. Make sure external drives and USBs are clean! 4. Be aware when third parties enter your systems or data! 5. Protect your passwords! 6. Never connect personal items to the ship critical systems. 7. Never use external wi-fi for company s or downloads unless protected by VPN! 8.Learn how to install and use two step authentication. 9. Learn how backup and restore is done onboard your ship. 10. Always report errors and mistakes. 11. Educate yourself on cyber risks and how it affects your ship, your colleagues and you personally! 26
27 1. Think before you click! 2. Research the facts behind s and their attachments! 3. Make sure external drives and USBs are clean! 4. Be aware when third parties enter your systems or data! 5. Protect your passwords! 6. Never connect personal items to the ship critical systems. 7. Never use external wi-fi for company s or downloads unless protected by VPN! 8. Learn how to install and use two step authentication. 9.Learn how backup and restore is done onboard your ship. 10. Always report errors and mistakes. 11. Educate yourself on cyber risks and how it affects your ship, your colleagues and you personally! 27
28 1. Think before you click! 2. Research the facts behind s and their attachments! 3. Make sure external drives and USBs are clean! 4. Be aware when third parties enter your systems or data! 5. Protect your passwords! 6. Never connect personal items to the ship critical systems. 7. Never use external wi-fi for company s or downloads unless protected by VPN! 8. Learn how to install and use two step authentication. 9. Learn how backup and restore is done onboard your ship. 10.Always report errors and mistakes. 11. Educate yourself on cyber risks and how it affects your ship, your colleagues and you personally! 28
29 1. Think before you click! 2. Research the facts behind s and their attachments! 3. Make sure external drives and USBs are clean! 4. Be aware when third parties enter your systems or data! 5. Protect your passwords! 6. Never connect personal items to the ship critical systems. 7. Never use external wi-fi for company s or downloads unless protected by VPN! 8. Learn how to install and use two step authentication. 9. Learn how backup and restore is done onboard your ship. 10. Always report errors and mistakes. 11.Educate yourself on cyber risks and how it affects your ship, your colleagues and you personally! 29
30 Cyber Security in a nutshell a continuous approach! What to protect? Ship, platform, organisation, people Assets What to protect against? Terrorists, cyber crime, Threats How to protect? People, Processes and Technology Protective measures Acceptable risk? Vulnerability and Risk assessment Detection, testing, monitoring, review 30
31 STRUCTURE Status on cyber security in maritime shipping Risk scenarios (threats) Best practices for you and your company DNV GL AND GARD AND CYBER SECURITY 31
32 DNV GL for managing risk, improving safety and performance We support business-critical activities across industries, including maritime, oil and gas, energy and healthcare Industry software solutions Data management and analytics Consulting and advisory services Industry data platform Cyber security 32
33 DNV GL CyberSecurity services RISK ASSESSMENT - System analysis and document review - Inspection, interviews, workshops - Self assessment CYBERSECURITY TESTING - Onboard audit - Vulnerability analysis and Penetration testing - Network health testing CYBERSECURITY TRAINING - Cybersecurity training and awareness - Workshops and e-learning - Phishing campaigns CYBERSECURITY COMPLIANCE - Type approval (TA): Applies to any component connected to a network - Class notation - GDPR, other standards/requirements
34 Gard Loss prevention awareness The easiest and most common way for cyber criminals to strike, is through negligent or poorly trained individuals Common perception among crew, doubting the importance of cyber security Cyber risk is related to operational procedures and crew training, not just the IT hardware and OT systems 34
35 Gard Loss prevention products Experience transfer and knowledge sharing based on real cases Alerts and posters for AWARENESS Circulars, Insights, videos for LEARNING Case studies for DISCUSSION 35
36 SAFER, SMARTER, GREENER Legal notice: This presentation has been made in collaboration with Gard. The presentation is not meant to constitute an operational tool. It is intended purely as awareness material and guidance to be used at user s own risk, and no warranties or representations are given nor are any duty of care or responsibility accepted by Gard or DNV-GL for any consequences whatsoever resulting directly or indirectly from compliance with or reliance on any guidance or advice contained in the presentation even if caused by a failure to exercise reasonable care on the part of any of the aforementioned parties The trademarks DNV GL, DNV, the Horizon Graphic and Det Norske Veritas are the properties of companies in the Det Norske Veritas group. All rights reserved. 36
CYBER RISK AND SHIPS :PRACTICAL ISSUES FOLLOWING BIMCO GUIDELINE
CYBER RISK AND SHIPS :PRACTICAL ISSUES FOLLOWING BIMCO GUIDELINE Yohan Le Gonidec, head of Shipowner support department, TECNITAS (subsidiary BUREAU VERITAS) 1 AGENDA 2 Introduction 1- Cyber incidents
Cyber and information security applicable for the maritime sector
MARITIME Cyber and information security applicable for the maritime sector Svante Einarsson 1 SAFER, SMARTER, GREENER Introduction 2 The tip of the iceberg 2015: 64,199 reported IT Security incidents just
Cyber Security in the Maritime Sector Threats, Trends and Reality
Cyber Security in the Maritime Sector Threats, Trends and Reality FUD *Fear, Uncertainty, Doubt 1st ever Maritime Cyber Security Incident was documented thoroughly in 1997 A computer hacker breaks into
Port Facility Cyber Security
International Port Security Program Port Facility Cyber Security Cyber Risk in the Marine Transportation System MAR'01 1 Objectives IDENTIFY motivations behind a cyber attack. IDENTIFY various types of
Cyber Risk in the offshore energy space
Cyber Risk in the offshore energy space Class Society Approach 1 Lillehammer Energy Claims Conference SAFER, SMARTER, GREENER Agenda DNV GL s approach to cyber risks Cyber Security Recommended Practices
Cyber risk management into the ISM Code
Building trust. Shaping Safety No. Subject: Cyber risk management into the ISM Code To: insb auditors/managing companies IMO Resolution incorporates maritime cyber risk management into the ISM Code making
Maritime cyber security
Maritime cyber security How the Greek market is driving the industry 1 SAFER, SMARTER, GREENER Your presenters Patrick Rossi Principal Cyber Security Service Manager, Maritime Certified Ethical Hacker
SMART Ship Program. Najmeh Masoudi Cyber safety and security manager. Palazzo S. Giorgio - Genova, 28/06/ Copyright Bureau Veritas
SMART Ship Program Palazzo S. Giorgio - Genova, 28/06/2017 Najmeh Masoudi Cyber safety and security manager Biography Najmeh Masoudi Cyber safety and security project manager Bureau Veritas Marine & Offshore
Cyber Security. February 13, 2018 (webinar) February 15, 2018 (in-person)
Cyber Security Presenters: - Brian Everest, Chief Technology Officer, Starport Managed Services - Susan Pawelek, Accountant, Compliance and Registrant Regulation February 13, 2018 (webinar) February 15,
Unit 3 Cyber security
2016 Suite Cambridge TECHNICALS LEVEL 3 IT Unit 3 Cyber security Y/507/5001 Guided learning hours: 60 Version 3 - revised September 2016 ocr.org.uk/it LEVEL 3 UNIT 3: Cyber security Y/507/5001 Guided learning
Cyber fraud and its impact on the NHS: How organisations can manage the risk
Cyber fraud and its impact on the NHS: How organisations can manage the risk Chair: Ann Utley, Preparation Programme Manager, NHS Providers Arno Franken, Cyber Specialist, RSM Sheila Pancholi, Partner,
GUIDELINES ON MARITIME CYBER RISK MANAGEMENT
E 4 ALBERT EMBANKMENT LONDON SE1 7SR Telephone: +44 (0)20 7735 7611 Fax: +44 (0)20 7587 3210 GUIDELINES ON MARITIME CYBER RISK MANAGEMENT MSC-FAL.1/Circ.3 5 July 2017 1 The Facilitation Committee, at its
CYBER SECURITY AND MITIGATING RISKS
CYBER SECURITY AND MITIGATING RISKS 01 WHO Tom Stewart Associate Director Technology Consulting Chicago Technical Security Leader Protiviti Slides PRESENTATION AGENDA 3 START HACKING DEFINITION BRIEF HISTORY
A practical guide to IT security
Data protection A practical guide to IT security Ideal for the small business The Data Protection Act states that appropriate technical and organisational measures shall be taken against unauthorised or
Unit 2 Essentials of cyber security
2016 Suite Cambridge TECHNICALS LEVEL 2 IT Unit 2 Essentials of cyber security A/615/1352 Guided learning hours: 30 Version 1 September 2016 ocr.org.uk/it LEVEL 2 UNIT 2: Essentials of cyber security A/615/1352
Defense-in-Depth Against Malicious Software. Speaker name Title Group Microsoft Corporation
Defense-in-Depth Against Malicious Software Speaker name Title Group Microsoft Corporation Agenda Understanding the Characteristics of Malicious Software Malware Defense-in-Depth Malware Defense for Client
Cybersecurity, safety and resilience - Airline perspective
Arab Civil Aviation Commission - ACAC/ICAO MID GNSS Workshop Cybersecurity, safety and resilience - Airline perspective Rabat, November, 2017 Presented by Adlen LOUKIL, Ph.D CEO, Resys-consultants Advisory,
COUNTERING CYBER CHAOS WITH HIPAA COMPLIANCE. Presented by Paul R. Hales, J.D. May 8, 2017
COUNTERING CYBER CHAOS WITH HIPAA COMPLIANCE Presented by Paul R. Hales, J.D. May 8, 2017 1 HIPAA Rules Combat Cyber Crime HIPAA Rules A Blueprint to Combat Cyber Crime 2 HIPAA Rules Combat Cyber Crime
716 West Ave Austin, TX USA
Fundamentals of Computer and Internet Fraud GLOBAL Headquarters the gregor building 716 West Ave Austin, TX 78701-2727 USA TABLE OF CONTENTS I. INTRODUCTION What Is Computer Crime?... 2 Computer Fraud
ABS CyberSafety. 27 July John Jorgensen Director, Cyber and Software American Bureau of Shipping
2016 American Bureau of Shipping. All rights reserved. ABS CyberSafety 27 July 2016 John Jorgensen Director, Cyber and Software American Bureau of Shipping JohnJorgensen@eagle.org SOCP Webinar Purpose
Maritime cyber security: Threats & Opportunities. Andy Davis, Research Director Yevgen Dyryavyy, Security Consultant
Maritime cyber security: Threats & Opportunities Andy Davis, Research Director Yevgen Dyryavyy, Security Consultant Agenda Cyber threats to the marine industry Attack surface overview (harbour / ships
Security analysis and assessment of threats in European signalling systems?
Security analysis and assessment of threats in European signalling systems? New Challenges in Railway Operations Dr. Thomas Störtkuhl, Dr. Kai Wollenweber TÜV SÜD Rail Copenhagen, 20 November 2014 Slide
DIGITAL ACCOUNTANCY FORUM CYBER SESSION. Sheila Pancholi Partner, Technology Risk Assurance
DIGITAL ACCOUNTANCY FORUM CYBER SESSION Sheila Pancholi Partner, Technology Risk Assurance Section 1: The background World s biggest data breaches 10 years ago 2007 2006 accidentally published hacked inside
NORTH AMERICAN SECURITIES ADMINISTRATORS ASSOCIATION Cybersecurity Checklist for Investment Advisers
Identify Protect Detect Respond Recover Identify: Risk Assessments & Management 1. Risk assessments are conducted frequently (e.g. annually, quarterly). 2. Cybersecurity is included in the risk assessment.
Cyber security tips and self-assessment for business
Cyber security tips and self-assessment for business Last year one in five New Zealand SMEs experienced a cyber-attack, so it s essential to be prepared. Our friends at Deloitte have put together this
Insider Threat Detection Including review of 2017 SolarWinds Federal Cybersecurity Survey
Insider Threat Detection Including review of 2017 SolarWinds Federal Cybersecurity Survey CyberMaryland Conference 2017 Bob Andersen, Sr. Manager Federal Sales Engineering robert.andersen@solarwinds.com
ANATOMY OF AN ATTACK!
ANATOMY OF AN ATTACK! Are Your Crown Jewels Safe? Dom Kapac, Security Evangelist WHAT DO WE MEAN BY CROWN JEWELS? Crown jewels for most organizations are critical infrastructure and data Data is a valuable
Cyber-Threats and Countermeasures in Financial Sector
Michael Mavroforakis, PhD Group CISO & CDO SEV: Workshop on Digital Enablers (Cloud & Cybersecurity) 27th March 2018 Agenda: CYBERSECURITY Potential Targets Attack Examples Insider vs Outsider Threats
ST. VINCENT AND THE GRENADINES
ST. VINCENT AND THE GRENADINES MARITIME ADMINISTRATION CIRCULAR N ISM 014 MARITIME CYBER RISK MANAGEMENT MSC.1/CIRC.1526, MSC-FAL.1/CIRC.3, RESOLUTION MSC.428 (98) TO: APPLICABLE TO: SHIPOWNERS, SHIPS
Securing Information Systems
Chapter 7 Securing Information Systems 7.1 2007 by Prentice Hall STUDENT OBJECTIVES Analyze why information systems need special protection from destruction, error, and abuse. Assess the business value
Cybersecurity The Evolving Landscape
Cybersecurity The Evolving Landscape 1 Presenter Zach Shelton, CISA Principal DHG IT Advisory Zach.Shelton@DHG.com Raleigh, NC 14+ years of experience in IT Consulting 11+ years of experience with DHG
THE CRITICAL COMMUNICATIONS COMPANY CYBER SECURITY AS A SERVICE
THE CRITICAL COMMUNICATIONS COMPANY CYBER SECURITY AS A SERVICE International Maritime Organization Regulations IMO has given shipowners and managers until 2021 to incorporate cyber risk management into
Maritime cyber risk management
Javier Yasnikouski Head Maritime Security Sub-Division for Maritime Security and Facilitation The International Maritime Organization IMO mission: Safe, secure and efficient shipping on clean oceans 2
Security Awareness & Best Practices Best Practices for Maintaining Data Security in Your Business Environment
Security Awareness & Best Practices Best Practices for Maintaining Data Security in Your Business Environment Ray Colado, Information Security Analyst Raise awareness around information security to help
Mike Spear, Ops Leader Greg Maciel, Cyber Director INDUSTRIAL CYBER SECURITY PROGRAMS
Mike Spear, Ops Leader Greg Maciel, Cyber Director INDUSTRIAL CYBER SECURITY PROGRAMS Can You Answer These Questions? 1 What s my company s exposure to the latest industrial cyber threat? Are my plants
Introduction to Information Security Dr. Rick Jerz
Introduction to Information Security Dr. Rick Jerz 1 Goals Explain the various types of threats to the security of information Discuss the different categorizations of security technologies and solutions
Education Network Security
Education Network Security RECOMMENDATIONS CHECKLIST Learn INSTITUTE Education Network Security Recommendations Checklist This checklist is designed to assist in a quick review of your K-12 district or
Securing Your Most Sensitive Data
Software-Defined Access Securing Your Most Sensitive Data Company Overview Digital Growth Means Digital Threats Digital technologies offer organizations unprecedented opportunities to innovate their way
4 Information Security
4 Information Security 1. Identify the five factors that contribute to the increasing vulnerability of information resources, and provide a specific example of each one. 2. Compare and contrast human mistakes
Critical Infrastructure Protection for the Energy Industries. Building Identity Into the Network
Critical Infrastructure Protection for the Energy Industries Building Identity Into the Network Executive Summary Organizations in the oil, gas, and power industries are under increasing pressure to implement
CYBERSECURITY RISK LOWERING CHECKLIST
CYBERSECURITY RISK LOWERING CHECKLIST The risks from cybersecurity attacks, whether external or internal, continue to grow. Leaders must make thoughtful and informed decisions as to the level of risk they
A MULTILAYERED SECURITY APPROACH TO KEEPING HEALTHCARE DATA SECURE
SESSION ID: SPO2-W12 A MULTILAYERED SECURITY APPROACH TO KEEPING HEALTHCARE DATA SECURE Frank Bunton VP, CISO MedImpact Healthcare Systems, Security @frankbunton Larry Biggs Security Engineer III - Threat
Personal Cybersecurity
Personal Cybersecurity The Basic Principles Jeremiah School, CEO How big is the issue? 9 8 7 6 5 4 3 2 1 Estimated global damages in 2018 0 2016 2018 2020 2022 2024 2026 2028 2030 Internet Users Billions
The modern car has 100 million lines of code and over half of new vehicles will be connected by 2020.
Automotive The modern car has 100 million lines of code and over half of new vehicles will be connected by 2020. Cars are becoming increasingly connected through a range of wireless networks The increased
Cybersecurity Today Avoid Becoming a News Headline
Cybersecurity Today 2017 Avoid Becoming a News Headline Topics Making News Notable Incidents Current State of Affairs Common Points of Failure Three Quick Wins How to Prepare for and Respond to Cybersecurity
Checklist: Credit Union Information Security and Privacy Policies
Checklist: Credit Union Information Security and Privacy Policies Acceptable Use Access Control and Password Management Background Check Backup and Recovery Bank Secrecy Act/Anti-Money Laundering/OFAC
NEW YORK CYBERSECURITY REGULATION COMPLIANCE GUIDE
COMPLIANCE ADVISOR NEW YORK CYBERSECURITY REGULATION COMPLIANCE GUIDE A PUBLICATION BY THE EXCESS LINE ASSOCIATION OF NEW YORK One Exchange Plaza 55 Broadway 29th Floor New York, New York 10006-3728 Telephone:
How do you track devices that have been approved for use? Are you automatically alerted if an unapproved device connects to the network?
Cybersecurity Due Diligence Checklist Control # Control Name Risks Questions for IT 1 Make an Benign Case: Employees Inventory of using unapproved Authorized devices without Devices appropriate security
Presenter Jakob Drescher. Industry. Measures used to protect assets against computer threats. Covers both intentional and unintentional attacks.
Presenter Jakob Drescher Industry Cyber Security 1 Cyber Security? Measures used to protect assets against computer threats. Covers both intentional and unintentional attacks. Malware or network traffic
HOW SAFE IS YOUR DATA? Micho Schumann, KPMG, Cayman Islands
HOW SAFE IS YOUR DATA? Micho Schumann, KPMG, Cayman Islands HOW SAFE IS YOUR DATA? 16 November 2017 kpmg.ky Agenda Introduction Cyber Security presentation Q&A 3 Why this presentation? 4 The CIA Triad
DHS Cybersecurity. Election Infrastructure as Critical Infrastructure. June 2017
DHS Cybersecurity Election Infrastructure as Critical Infrastructure June 2017 Department of Homeland Security Safeguard the American People, Our Homeland, and Our Values Homeland Security Missions 1.
CYBER SECURITY AND THE PENSIONS INDUSTRY Karen Tasker 1 February 2018
CYBER SECURITY AND THE PENSIONS INDUSTRY Karen Tasker 1 February 2018 What s the relevance for pension schemes? What do cyber risks look like? What should Trustees be doing? Cyber risk means any risk of
Security Audit What Why
What A systematic, measurable technical assessment of how the organization's security policy is employed at a specific site Physical configuration, environment, software, information handling processes,
Too Little Too Late: Top Reasons Why You Got Hacked
TUESDAY MAY 23,2017 2:00-3:15 PM Too Little Too Late: Top Reasons Why You Got Hacked MODERATOR SPEAKERS John Gross Director of Financial Management, City of Long Beach, CA Chad Alvarado Supervisory Special
Chapter 12. Information Security Management
Chapter 12 Information Security Management We Have to Design It for Privacy... and Security. Tension between Maggie and Ajit regarding terminology to use with Dr. Flores. Overly technical communication
ISO COMPLIANCE GUIDE. How Rapid7 Can Help You Achieve Compliance with ISO 27002
ISO 27002 COMPLIANCE GUIDE How Rapid7 Can Help You Achieve Compliance with ISO 27002 A CONTENTS Introduction 2 Detailed Controls Mapping 3 About Rapid7 8 rapid7.com ISO 27002 Compliance Guide 1 INTRODUCTION
Troubleshooting and Cyber Protection Josh Wheeler
May 4, 2016 Troubleshooting and Cyber Protection Josh Wheeler Network Security Network Security Risks Video Network Security Risks Article Network Security Risks Data stealing or disruption of network
Protecting your next investment: The importance of cybersecurity due diligence
Protecting your next investment: The importance of cybersecurity due diligence Oct. 11, 2018 Baker Tilly Virchow Krause, LLP. All rights reserved. Baker Tilly refers to Baker Tilly Virchow Krause, LLP,
Securing Industrial Control Systems
L OCKHEED MARTIN Whitepaper Securing Industrial Control Systems The Basics Abstract Critical infrastructure industries such as electrical power, oil and gas, chemical, and transportation face a daunting
The Cyber War on Small Business
The Cyber War on Small Business Dillon Behr Executive Lines Broker Risk Placement Services, Inc. Meet Our Speaker Dillon Behr Executive Lines Broker Risk Placement Services, Inc. Previously worked as Cyber
CYBERSECURITY IN THE INDUSTRIAL INTERNET OF THINGS
CYBERSECURITY IN THE INDUSTRIAL INTERNET OF THINGS Susanne Bieller, EUnited Robotics EC Workshop in the area of autonomous systems / robots / IoT Brussels, 13 July 2017 Different needs according to classification
2017 Annual Meeting of Members and Board of Directors Meeting
2017 Annual Meeting of Members and Board of Directors Meeting Dan Domagala; "Cybersecurity: An 8-Point Checklist for Protecting Your Assets" Join this interactive discussion about cybersecurity trends,
ISM code examples of cyber security audit findings Simple steps to get started
London International Shipping Week ISM code examples of cyber security audit findings Simple steps to get started September 15 2017 DNV GL MARITIME ADVISORY PATRICK ROSSI CYBER SECURITY SERVICE MANAGER
Cyber Insurance: What is your bank doing to manage risk? presented by
Cyber Insurance: What is your bank doing to manage risk? David Kitchen presented by Lisa Micciche Today s Agenda Claims Statistics Common Types of Cyber Attacks Typical Costs Incurred to Respond to an
How Breaches Really Happen
How Breaches Really Happen www.10dsecurity.com About Dedicated Information Security Firm Clients Nationwide, primarily in financial industry Services Penetration Testing Social Engineering Vulnerability
Security Policy (EN) v1.3
Security Policy (EN) v1.3 Author: Erik Klein Langenhorst Date: Sept 21, 2017 Classificatie: 2 Intended for stakeholders only Security Policy (EN) v1.5 Pagina 1 van 9 Version History Version Date Name Changes
Securing the SMB Cloud Generation
Securing the SMB Cloud Generation Intelligent Protection Against the New Generation of Threats Colin Brackman, National Distribution Manager, Consumer Sales, Symantec Christopher Covert Principal Product
Cybersecurity and Nonprofit
Cybersecurity and Nonprofit 2 2 Agenda Cybersecurity and Non Profits Scenario #1 Scenario #2 What Makes a Difference Cyber Insurance and How it Helps Question and Answer 3 3 Cybersecurity and Nonprofit
Connect Securely in an Unsecure World. Jon Clay Director: Global Threat
Connect Securely in an Unsecure World Jon Clay Director: Global Threat Communications @jonlclay www.cloudsec.com More devices More data More risks Global Risks Landscape 2018 Source: http://www3.weforum.org/docs/wef_grr18_report.pdf
Department of Management Services REQUEST FOR INFORMATION
RESPONSE TO Department of Management Services REQUEST FOR INFORMATION Cyber-Security Assessment, Remediation, and Identity Protection, Monitoring, and Restoration Services September 3, 2015 250 South President
Defending Our Digital Density.
New Jersey Cybersecurity & Communications Integration Cell Defending Our Digital Density. @NJCybersecurity www.cyber.nj.gov NJCCIC@cyber.nj.gov The New Jersey Cybersecurity & Communications Integration
Data Security and Privacy : Compliance to Stewardship. Jignesh Patel Solution Consultant,Oracle
Data Security and Privacy : Compliance to Stewardship Jignesh Patel Solution Consultant,Oracle Agenda Connected Government Security Threats and Risks Defense In Depth Approach Summary Connected Government
No IT Audit Staff? How to Hack an IT Audit. Presenters. Mark Bednarz, Partner-In-Charge, Risk Advisory PKF O Connor Davies, LLP
No IT Audit Staff? How to Hack an IT Audit Presenters Mark Bednarz, Partner-In-Charge, Risk Advisory PKF O Connor Davies, LLP Learning Objectives After this session, participants will be able to: Devise
ISM Cyber Security Process
ISM Cyber Security 01.June 2018 1 ISM Cyber Security Berufsgenossenschaft Verkehrswirtschaft Post-Logistik Telekommunikation Dienststelle Schiffssicherheit ISM Cyber Security Process 1. Policy 8. Qualification
Security Aspects Control Rationale Best Practices Self-Assessment (Click all that applicable) 1. Security Policy and Security Management
Seven Habits of Cyber Security for SMEs Security Aspects Control Rationale Best Practices Self-Assessment (Click all that applicable) 1. Security Policy and Security Management Security Policy is an important
NW NATURAL CYBER SECURITY 2016.JUNE.16
NW NATURAL CYBER SECURITY 2016.JUNE.16 ADOPTED CYBER SECURITY FRAMEWORKS CYBER SECURITY TESTING SCADA TRANSPORT SECURITY AID AGREEMENTS CONCLUSION QUESTIONS ADOPTED CYBER SECURITY FRAMEWORKS THE FOLLOWING
13th Florence Rail Forum: Cyber Security in Railways Systems. Immacolata Lamberti Andrea Pepato
13th Florence Rail Forum: Cyber Security in Railways Systems Immacolata Lamberti Andrea Pepato November 25, 2016 Cyber Security context and Cyber Attacks trend Critical Infrastructures (CIs) are both physical
ACM Retreat - Today s Topics:
ACM Retreat - Today s Topics: Phase II Cyber Risk Management Services - What s next? Policy Development External Vulnerability Assessment Phishing Assessment Security Awareness Notification Third Party
Enhancing infrastructure cybersecurity in Europe Rossella Mattioli Secure Infrastructures and Services
Enhancing infrastructure cybersecurity in Europe Rossella Mattioli Secure Infrastructures and Services European Union Agency for Network and Information Security Securing Europe s Information society 2
Sage Data Security Services Directory
Sage Data Security Services Directory PROTECTING INFORMATION ASSETS ENSURING REGULATORY COMPLIANCE FIGHTING CYBERCRIME Discover the Sage Difference Protecting your business from cyber attacks is a full-time
UPDATE: HEALTHCARE CYBERSECURITY & INCIDENT RESPONSE Lindsay M. Johnson, Esq. Partner, Freund, Freeze & Arnold, LPA
UPDATE: HEALTHCARE CYBERSECURITY & INCIDENT RESPONSE Lindsay M. Johnson, Esq. Partner, Freund, Freeze & Arnold, LPA ljohnson@ffalaw.com INTRODUCTION Cyber attacks increasing Liability/actions resulting
Cyber Security. Our part of the journey
Cyber Security Our part of the journey The Journey Evolved Built on the past Will be continued Not always perfect Small Steps moving forward The Privileged How to make enemies quickly Ask before acting
Information Technology Cyber Security Policy. Convergint Technologies, LLC
Information Technology Cyber Security Policy Convergint Technologies, LLC September 2015 Convergint Technologies, LLC POLICY MANUAL Subject: CYBER SECURITY POLICY Approved: Tom Schmitt Effective Date:
Restech. User Security AVOIDING LOSS GAINING CONFIDENCE IN THE FACE OF TODAY S THREATS
Restech User Security AVOIDING LOSS GAINING CONFIDENCE IN THE FACE OF TODAY S THREATS Your presenter: Vince Gremillion, CISSP 30+ years technical and customer service experience Founder/Co-Owner RESTECH
Recommendations for Implementing an Information Security Framework for Life Science Organizations
Recommendations for Implementing an Information Security Framework for Life Science Organizations Introduction Doug Shaw CISA, CRISC Director of CSV & IT Compliance Azzur Consulting Agenda Why is information
How Cyber-Criminals Steal and Profit from your Data
How Cyber-Criminals Steal and Profit from your Data Presented by: Nick Podhradsky, SVP Operations SBS CyberSecurity www.sbscyber.com Consulting Network Security IT Audit Education 1 Agenda Why cybersecurity
Cyber risk and Cyber security countermeasures
Cyber risk and Cyber security countermeasures 1. Introduction...1 2. Example of a ship communications system that has been infected with a virus...2 3. Preparation needed to manage cyber security countermeasures...5
Forging a Stronger Approach for the Cybersecurity Challenge. Session 34, February 12, 2019 Tom Stafford, VP & CIO, Halifax Health
Forging a Stronger Approach for the Cybersecurity Challenge Session 34, February 12, 2019 Tom Stafford, VP & CIO, Halifax Health 1 Speaker Introduction Tom Stafford, Vice President & CIO Education: Bachelors
Guide to Cyber Security Compliance with GDPR
Guide to Cyber Security Compliance with GDPR Security V1.3 General Data Protection Regulation GDPR Overview What is GDPR? An EU regulation coming into force in May 2018 Which means it applies to all EU
Security in a Converging IT/OT World
Security in a Converging IT/OT World Introduction Around the winter solstice, darkness comes early to the citizens of Ukraine. On December 23, 2015, it came a little earlier than normal. In mid-afternoon,
IC32E - Pre-Instructional Survey
Name: Date: 1. What is the primary function of a firewall? a. Block all internet traffic b. Detect network intrusions c. Filter network traffic d. Authenticate users 2. A system that monitors traffic into
Cyber Risk A new challenge for Classification Societies
Cyber Risk A new challenge for Classification Societies Pier Carazzai 20 November 2017 Hong Kong Safety Moment 2 Cyber Risk Cyber Risks in the era of SMART vessels What are the main factors driving the
NEW DATA REGULATIONS: IS YOUR BUSINESS COMPLIANT?
NEW DATA REGULATIONS: IS YOUR BUSINESS COMPLIANT? What the new data regulations mean for your business, and how Brennan IT and Microsoft 365 can help. THE REGULATIONS: WHAT YOU NEED TO KNOW Australia:
Protect Your Endpoint, Keep Your Business Safe. White Paper. Exosphere, Inc. getexosphere.com
Protect Your Endpoint, Keep Your Business Safe. White Paper Exosphere, Inc. getexosphere.com White Paper Today s Threat Landscape Cyber attacks today are increasingly sophisticated and widespread, rendering
Keys to a more secure data environment
Keys to a more secure data environment A holistic approach to data infrastructure security The current fraud and regulatory landscape makes it clear that every firm needs a comprehensive strategy for protecting
Verizon Software Defined Perimeter (SDP).
Verizon Software Defined Perimeter (). 1 Introduction. For the past decade, perimeter security was built on a foundation of Firewall, network access control (NAC) and virtual private network (VPN) appliances.
CYBER SECURITY ON BOARD GUIDELINES MARCH 2015
CYBER SECURITY ON BOARD GUIDELINES MARCH 2015 The Guidelines on Cyber Security onboard Ships Terms of Use The advice and information given in the Guidelines on Cyber Security onboard Ships (the Guidelines)
The GenCyber Program. By Chris Ralph
The GenCyber Program By Chris Ralph The Mission of GenCyber Provide a cybersecurity camp experience for students and teachers at the K-12 level. The primary goal of the program is to increase interest
IoT & SCADA Cyber Security Services
RIOT SOLUTIONS PTY LTD P.O. Box 10087 Adelaide St Brisbane QLD 4000 BRISBANE HEAD OFFICE Level 22, 144 Edward St Brisbane, QLD 4000 T: 1300 744 028 Email: sales@riotsolutions.com.au www.riotsolutions.com.au
Oil and gas cybersecurity. Penetration testing techniques
Oil and gas cybersecurity Penetration testing techniques Cybersecurity means much more than protecting data. Threats to Operational Technology (OT) systems, can cause production stoppages, a decrease in