IML 207 GP Slide Presentation siuu.pptx

slide

1. NAME; AHMAD AIMAN, MUHAMMAD HAFIZI MUHAMMAD IQBAL INFORMATION SECURITY MANAGEMENT MODELS

2. In today's digital era, libraries serve as essential stewards of knowledge, offering extensive resources that enhance education, research, and community connections. With the integration of digital platforms, these institutions now provide convenient access to e-books, journals, databases, and other online materials. However, this technological evolution also brings challenges and responsibilities, particularly in safeguarding sensitive data and systems. Library information security encompasses strategies and practices designed to protect data, systems, and resources from threats like unauthorized access, cyberattacks, and data breaches. It aims to maintain the confidentiality, integrity, and availability of information. Confidentiality focuses on shielding user data and proprietary resources from unauthorized disclosure. Integrity ensures that data remains accurate and unaltered, while availability ensures uninterrupted access to resources and systems for users. Introduction

3. Protecting Sensitive Information Confidentiality Protecting user data and proprietary resources from unauthorized exposure. Integrity Ensuring data remains accurate and unaltered. Availability Ensuring users can access resources and systems without disruption.

4. 1 Hurricanes High winds, heavy rainfall, and storm surges can devastate coastal areas. 2 Earthquakes Sudden release of energy in the Earth's crust, causing ground shaking and potential damage. 3 Floods Excessive water inundating land, causing damage to infrastructure and property. Force of Nature: Natural Disasters

5. NIST Security Publications Comprehensive, free, and adaptable guidelines for managing security. Covers topics like risk management, cryptography, and compliance (FISMA, GDPR). Models Selected Access Control Models Security Management Models Emphasize proactive measures like penetration testing and secure software development, integrating risk management to address threats and fostering a security-focused culture. Non-Discretionary Controls use centralized mechanisms like RBAC to restrict access based on roles, ensuring data security, supporting disaster recovery, and minimizing unauthorized access. Frameworks like RBAC and task-based controls for structured access management. Core principles: least privilege, need-to-know, and separation of duties.

6. Software Attacks: Exploiting System Vulnerabilities Malware Harmful programs like viruses, worms, ransomware, and spyware. Phishing Attackers pretending to be trusted entities to trick users into sharing sensitive information. Advanced Attacks Targeting specific flaws in software to take control of systems or steal data.

7. Cyber Threats and Vulnerabilities 1 Phishing Attacks Tricking users into sharing sensitive information through fake emails or websites. 2 Ransomware Locking user files and demanding payment for their release. 3 Distributed Denial of Service (DDoS) Attacks Overwhelming a system with traffic, making it unavailable to legitimate users.

8. Data Protection Laws Libraries must comply with laws like GDPR, ensuring responsible data collection, storage, and use. Intellectual Freedom Protecting the confidentiality of users' inquiries and research. Model Not Selected

9. Building a Resilient Information Security Strategy 1 Proactive Risk Management 2 Secure Software Development 3 Regular Updates and Patches 4 User Education and Awareness 5 Incident Response and Recovery

10. Knowledge sharing and safeguarding resources make libraries important dual social institutions in this fast-changing digital environment; they experience natural disasters, cyberattacks, and robust access control issues to mention just a few. Security models focus mostly on digital threats but are also helpful in recovering systems after disasters. But it takes a library to have an up-to-date and strong access control and educate the users on safe computer habits to watch for software attacks such as malware, phishing, or even one that exploits a vulnerability in the system. Frameworks such as NIST Security Publications and access control models hold various tools for solving related problems. With flexible systematic security strategies within legal and ethical boundaries, libraries can be able to protect their digital assets while ensuring their users have access to them. Conclusion