Re: How to create security awareness in top management

["crazy frog crazy frog" <i.m.crazy.frog () gmail com>]

Hi,

Managment dont like much technical details.The point is you have to
explain them all the security related issues with some real life
stories.Try to get some real life examples(not neccessarly you hack
your company's network but you can google for such stories and
statistics).Then try to connect them with the security policies of you
company.
I think in that way you can present your points very well in front of managment.

Regards,
_CF

On 10/3/06, anyluser <anyluser () yahoo com> wrote:
> One point you can make as you go along is the fact
> that they probably spend time ensuring physical
> security at their sites.  Their physical security
> measures (which usually -arent- taken for granted in
> most organizations) have the benefit of protecting the
> employees as well the equipment.  Both of which are
> -very- valuable.
>
> The point is that the data and intellectual capital of
> the company becomes more valuable then the equipment
> used to create it.  It's not hard to replace a
> computer b/c you can call Dell and have one
> overnighted to you as a replacement.
>
> The data that was on it was created through man-hours.
>  Though reproducable, the cost associated with a
> timely replacement of intellectual capital has its own
> costs that can be equal or higher then the investments
> needed to warehouse and secure it.
>
> This talk about data loss translates well into general
> netsec b/c it's just as easy to lose data through
> external malevolence as it is to power surges and
> floods.
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
>
> ---------------------------------------------------------------------------
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic Excellence
> in Information Security. Our program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting experience.
> Using interactive e-Learning technology, you can earn this esteemed degree,
> without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------


--
---------------------------------------
http://www.secgeeks.com
---------------------------------------
ting ding ting ding ting ding
ting ding ting ding ding
i m crazy frog :)
"oh yeah oh yeah...
another wannabe, in hackerland!!!"

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------