Introduction to data communication ,Basic

Basic knowledge on data comm

1. Week 04-08/March
Topics
i.Security Risk Terminology
ii.Risk Management
iii.Risk Controls
Outcomes
 On completion of this unit, students will be able to explain key
security controls of the critical resources of information system
Describe security management and set related security
measures.
Materials and Resources
Syllabus, handouts, whiteboard, non -permanent markers, computer
terminals and Online Platforms
TEXT BOOKS:
Principles of Information Security by Michael E. Whitman and
Herbert J.Mattord
Information Security ”The Complete Reference
TM
by Mark S. Merkow
Jim Breithaupt
1
ISS_2024-i ©Gabriel

2. Risk Terminology & Management
Information security professionals must know their
organizations’ information system assets: identify, classify,
and prioritize them.
Key Terms:
Asset
Vulnerability
Risk: “effect of uncertainty on objectives” (ISO 31000).
Risk identification
Risk assessment
Impact
Risk Management: coordinated set of activities and method
to control risks.
ISS_2024_i ©Gabriel 2

3. Risk Controls
It´s mandatory to identify, examine, and understand the
current information system in your organization.
Information System Security professional must know what
assets are, where they are, how they add value to the
organizationand the vulnerabilities to which they are
susceptible.
Risk control is any strategy that attempts to eliminate or
reduce any uncontrolled risk through the application of
additional safeguards.
Four Control Alternatives:
Mitigation
Transference
Acceptance
Avoidance
ISS_2024_i ©Gabriel 3