Download Cybersecurity and Information Assurance

Mr Joseph Pindar and
Dr Jonathan Rigelsford
The University of Sheffield
By:
Arwa Ashoor 200700427
 Introduction
 The
Enterprise and Cybersecurity
 Improving the Operational Effectiveness
 Strategic Advantage
 Implementing a Cybersecurity
Programme





Strategic Alignment: How Cybersecurity and Information
Assurance interface with other areas of the enterprise is
critical to success.
Communication: The importance of effectively
communicating the value of Cybersecurity value throughout
the enterprise.
Cloud Computing: What is it and how does it impact
Cybersecurity and Information Assurance.
Risk Management: Specifically the lack of objective data and
the difference in approach compared to other risk
management organizations.
Certification: The increased requirement of certification.



Information Assurance is considers to be a subset of
Cybersecurity
Information Assurance: Is the confidence that
information systems will protect the information they
handle and will function as they need to, when they
need to, under the control of legitimate users. For
example: hard-copy document storage and
transportation.
Cybersecurity: Defending against attacks on computer
systems; including control systems. For example: those
in electricity generation and distribution networks
 In
this section they discuss Porter and
Carr’s contributions to understanding the
role of operational effectiveness and
strategy in the enterprise.
 1-
Operational Effectiveness and
Strategy
 2- Carr’s view
 3- Competitive Advantage
 Porter
defines operational effectiveness
as “performing similar activities better
than rivals perform them” and that’s mean :
 Offering
lower cost and superior quality
at the same time.
 Improvements in methods raise the level
of competition

IA and Cybersecurity mainly contribute to the OE of the
enterprise in a similar way to Carr’s view of IT
 Information
Assurance and
Cybersecurity can boost profitability by
aligning to enterprise strategy.
 If
implemented badly can damage profits
 Deliver
outcomes to the enterprise’s
customer.
 How
improving operation effectiveness
lead to reduce the enterprise costs and
increase profitability.
 Antivirus
 Metrics
Cost

Risk Management
 Communicating
Cybersecurity
 Analytics
Chinese symbol of risk
 The
Cisco security programme enhances
the business by offering both cost efficient
processes to gain operational effectiveness
and strategic opportunities to create value.
 The(CEO) chooses the enterprise strategy
and makes business decisions in line with
that strategy.
 The(CSO) reports to the CEO and has the
role of explaining the security risks of
specific business decisions.
Thank you