ICIIP Marshall School of Business University of Southern California Mobile Telecom Security Summit January 24, 2007

Transcription

1 ICIIP Marshall School of Business University of Southern California Mobile Telecom Security Summit January 24, 2007

2 Mission: ICIIP Thumbnail ICIIP seeks to close the gap between the current corporate cyber/information security risk profile and what is needed to protect our nation s critical information infrastructure. Strategy: Create business value for investments in information infrastructure security through public/private partnerships, education, and research while providing maximum insight and objectivity.

3 ICIIP Activities Systemic Security Management Management Framework and ROI justification Best Practices and Standards DHS sponsored National Cyber Security Survey County of Los Angeles Cyber Security Strategy Executive Education Leading Systemic Security Management White Paper on Next Generation Network Security and Opportunities for Carriers DHS white papers on Information Sharing, Reinventing Security, and the cultural differences between Crisis Prepared and Crisis Prone companies Lord Foundation Grant Executive Briefings on Information Security Issues and Initiatives

4 What you will learn today A Framework to approach your Mobile Information Security Issues Systemic Security Management Security is more than technology. Yes, it includes the device, but also includes the environment and the network in which it's operating, as well as the people and the organizational strategy and design. Why mobile management and security issues are different from those required for conventional systems and how they are the same How risks with Mobile telecom can be much higher than with conventional systems Best Practices to mitigate risks to your mobile security Long term planning for dynamic mobile security to keep up with the rapidly changing mobile product universe That in a converged world, technology solutions are not the only answer

5 Systemic Security Management Organization Design Strategy Governance Culture Architecture Process People Emergence Enabling & Support Technology Human Factors

6 The Security Continuum COMPLIANCE BASED SECURITY COMMITMENT BASED SECURITY Functional Focus Communication Focus Systemic Integration Focus Commitment Focus

7 Compliance and Commitment Paradigms COMPLIANCE BASED SECURITY COMMITMENT BASED SECURITY Security as an inconvenient business requirement Single department responsibility Control access and emergency response focused Technology driven Management enforcement Restricted information flow Security as a competitive advantage Organization-wide responsibility Holistic perspective People development driven Self regulating Expansive information flow

8 Current Industry Alliances and Corporate Partnerships

9 Industry Partnership Levels of Participation Research Partner Contribution: $250,000 per year for three years Long-term, interdisciplinary, collaborative research on precompetitive technologies Partner-directed, partner-specific research projects Commitment to operations

10 ICIIP Research Partner Benefits o IP licensing rights to directed research project deliverables o Rights to pre-competitive research results o Seat on the Founding Council Executive Committee o Ability to leverage research funding over the next 3 years o Permission to send up to four representatives to ICIIP events o Reduced prices for employee executive education and training o Direct involvement in development, approval adoption and implementation of ICIIP Standards and Best Practices o Gain exposure and business relationships

11 Industry Partnership Levels of Participation Founders Council Contribution: $75K per year (CTM Members $50K) Long-term, interdisciplinary, collaborative research on precompetitive technologies Commitment to operations Member Benefits o Rights to pre-competitive research results o Ability to leverage research funding over the next 3 years o Ability to compete more effectively to hire USC students o Permission to send up to two representatives to ICIIP events o Reduced prices for employee executive education and training o Direct involvement in development, approval, adoption and implementation of ICIIP Standards and Best Practices o Gain exposure and business relationships

12 Industry Partnership Levels of Participation Solution Partner Contribution: $15K per year (CTM Members $10K) Long-term, interdisciplinary, collaborative research on precompetitive technologies Commitment to operations Solution Partner Benefits o Direct involvement in development, approval adoption and implementation of ICIIP Standards and Best Practices o Gain exposure and business relationships o Networking opportunities

13 Charles P. Meister Morley Winograd ICIIP Marshall School of Business University of Southern California