The Importance Of Infosec Program

NAME: MUTHUA BRIAN GITUANJA

I.D NO: 632543

CLASS: FIC 4010

TASK: TERM PAPER

LECTURER: PROF. MUSUVA

SEMESTER: SPRING 2014

DATE: 5th April 5, 2014

Contents

The Importance of InfoSec Program: 2

Advantages of Information Security: 2

Disadvantages of Information Security: 3

Why Banks’ should invest InfoSec Budget? 3

POLICY 3

Purpose 4

Responsibility 4

Ensuring Safety of Customer Information: 4

Assessing Digitals’ Bank risk in regard to customer and bank information, the bank will: 4

Record Keeping and Reporting in the Bank: 5

Employee Training and education 5

Policy Review 5

Sharing Policies with Employees 5

PEOPLE 5

TECHNOLOGY 6

Security overview 6

Value of Intrusion Detection 7

Conclusion 7

INTRODUCTION

According to the business dictionary, ‘a bank is a an establishment authorized by a government to accept deposits, pay interest, clear checks, make loans, act as an intermediary in financial transactions, and provide other financial services to its customers.’ Banks tend to exchange very important information across networks and among themselves. I was recently approached by the Digital bank of Kenya to design and improve their current information security program. As we worked together it is important the organization understands all the basics of information security and why it is important to invest in information security programs. Information Security also known sometimes as InfoSec is the process or practice of securing information from unauthorized access, use, alteration/modification, unwanted disclosure, inspection and/or deletion.

Two Major Aspects of InfoSec:

Information Technology (IT) Security- Also referred to as computer security, IT security is InfoSec applied to technology. It is very import...

... middle of paper ...

...for the firewall. Some surveys show that up to 80% of all firewalls that are not properly configured. This might mean that the access control policy is not being properly implemented. IDS’s can be configured to detect and respond to this situation.

Conclusion

Information is at the heart of many businesses in this modern era, and the all-pervasive impact of information security in collecting, transmitting and processing huge volumes of information is very important. In this scenario, the need for ensuring that information is kept confidential adhering to accepted norms of privacy and making it available to authorized users at the appropriate time assumes great significance. This is particularly valid for the banking sector where day-to-day operations are centred on information and information processing, which in turn is highly dependent on technology.