cooperative bank of Oromia , Cyber Security governance and management

ERM, cyber

1. Cyber Security Management Candidate : Shiferaw Bekele Date: December 19, 2022

2. outlines 01 Security Powers Business 05 Implementation Techniques 06 Wrap-up 04 Justification 03 Thematic Areas 02 Cyber Peace

3. Security Powers Business Secured system contributes to Business success (profitability of Banking) 01 Secured system brings Trustworthiness from Stakeholders 02 Secured system builds public confidence for further Business operation & production. 03 So, what can we do? 04

4. Cyber Peace As Cyber Security Management, Keeping Cyber Peace should be our primary Goal. Protecting Information, IS, infrastructure, mission critical system ASSSET So, in which areas shall we focus?

5. Thematic Areas Bring Peace of Cyber via 1 2 Top-management commitment &buy-in Building Cyber security policies

6. 4 Establishing dedicated Cyber Security department 5 6 Enhancing follow-up and monitoring. Establish robust plan and report approach. 3 Allocating budget & craft cyber security programs

7. 8 Providing diligent and competent security Service. As Cyber Security Management we should search opportunities such as late comer advantages and governments incentives. 7 Creating capacity building capacities.

8. Risk Assessment, Risk Analysis, Risk Treatment Data at Rest, Data in motion, Data in Use Authentication, Authorization, Accounting Confidentiality, Integrity, Availability Awareness Creation, Training Provision, Culture Cultivation Administrative Security Measure, Technical Security Measure, Physical Security Measure Based on org. risk aptitude, cost benefit analysis , CS Current State & CS Desire State we should focus on: Justification

9. Risk management, Change management, Incident Management Readiness, Responsiveness, Recovery Top management level, Middle management level, Lower management level Preventive Security Controls, Detective Security Controls, Corrective Security Controls Searching and crafting tools and techniques that enables to deploy Cyber Security programs. Justification …

10. Capacity Building Capacity on People, Process and Technology. The main pillars we should committed to while governing our cyber security 01 Alignment 03 Defense in Deepth 02 Risk Based Approach 04 Shared Responsibility Implementation Techniques Follow Deming cycle PDCA: plan , do, check, Act

11. The more we secured the more we profited Our organizational Security Maturity Level directly contributes to our banking profit. The main significance of CSM is to bring high maturity level of COP Bank of Oromia security posture that enables to support business operation mission. Wrap-Up

12. YOU! THANK