ROLE of Cyber Security

SEMINAR REPORT ON

ROLE OF CYBER SECURITY IN DIFFERENT APPLICATION OF E GOVERNANCE

COLLEGE OF COMPUTING SCIENCES AND INFORMATION TECHNOLOGY TMU, MORADABAD

Session: JULY 20!" DEC 20!

S#$%i&&e' To:

S#$%i&&e' B(:

M)* A+( Rs&o-i

R.#/ #%) MCA1LE ,SEM 3)' TCA!040!

1 | Page

COLLEGE OF COMPUTING SCIENCES AND INFORMATION TECHNOLOGY TEERTHANKER MAHAVEER UNIVERSITY DELHI ROAD, MORADABAD

This This is to certi certify fy that that the the semi semiar ar!" !"re rese seta tatio tio  re"or re"ortt o the the to"i to"icc #ROLE OF CYBER SECURITY IN DIFFERENT APPLICATION OF E GOVERNANCE5 has

 $ee st%&ie& a& "resete& $y R.#/ #%) i "artia' "artia' f%'fi''met f%'fi''met of &e(ree &e(ree of Master Master of  )om"%ter A""'icatio, ))SIT, TMU Mora&a$a&*

This semiar!"rese semiar!"resetatio tatio  re"ort re"ort has $ee fo%& satisfactory satisfactory a& is a""ro+e& a""ro+e& for  s%$missio*

Date& 

Mr* A-ay Rasto(i   Lect%re ))SIT, TMU

2 | Page

A)KNO.LED/MENT*

The satisfactio that accom"aies that the s%ccessf%' com"'etio of ay tas0 1o%'& $e icom"'ete 1itho%t the metio of "eo"'e 1hose cease'ess coo"eratio ma&e it "ossi$'e, 1hose costat (%i&ace a& eco%ra(emet cro1 a'' efforts 1ith s%ccess* .e are (ratef%' to o%r "ro-ect (%i&e M)*A+( Rs&o-i   for the (%i&ace, is"iratio a& costr%cti+e s%((estios that he'"f%' %s i the "re"aratio of this "ro-ect* .e a'so tha0 o%r  co''ea(%es 1ho ha+e he'"e& i s%ccessf%' com"'etio of the "ro-ect*

Rah%' 0%mar  M)A2LE3 SEM 4r&

3 | Page

Ta$'e of )otet 5*I NTRODU)TION 5*5 )y$er sec%rity 5*6 E /o+erace

6*)ON)E7T 6*5 E8/OVERNAN)E )ON)E7T 6*6 EVOLUTION O9 E8/OVERNAN)E 6*4 )YBER SE)URITY )ON)E7T IN E /OVERNAN)E

4* A77LI)ATIONS O9 E8/OV 4*5 Rea' 'ife a""'icatio of e8/o+erace 4*6 A""'icatio a& E8/o+erace Ser+ices

:*ROLE O9 )YBER SE)URITY :*5Ty"ica' ro'es :*6 Key of cy$er sec%rity

;* )ON)LUSION

<* RE9EREN)E

4 | Page

5 | Page

ROLE OF CYBER SECURITY IN DIFFERENT APPLICATION OF E GOVERNANCE * In&)o'#6&ion: * C($e) se6#)i&(

)y$er sec%rity refers (eera''y to the a$i'ity to cotro' access to et1or0e& systems a& the iformatio they cotai* .here cy$er sec%rity cotro's are effecti+e, cy$ers"ace is cosi&ere& a re'ia$'e, resi'iet, a& tr%st1orthy &i(ita' ifrastr%ct%re* .here cy$er sec%rity cotro's are a$set, icom"'ete, or "oor'y &esi(e&, cy$ers"ace is cosi&ere& the 1i'& 1est of  the &i(ita' a(e* E+e those 1ho 1or0 i the sec%rity "rofessio 1i'' ha+e a &ifferet +ie1 of  cy$er sec%rity &e"e&i( o the as"ects of cy$ers"ace 1ith 1hich they "ersoa''y iteract* .hether a system is a "hysica' faci'ity or a co''ectio of cy$ers"ace com"oets, the ro'e of a sec%rity "rofessioa' assi(e& to that system is to "'a for "otetia' attac0 a& "re"are for its cose=%eces*

Fi- *6($e) se6#)i&(

 A'tho%(h the 1or& #cy$er> is maistream +erac%'ar, to 1hat e?act'y it refers is e'%si+e* Oce a term of sciece fictio $ase& o the the8emer(i( fie'& of com"%ter cotro' a& comm%icatio 0o1 as cy$eretics, it o1 refers (eera''y to e'ectroic a%tomatio @Safire 5:* The corres"o&i( term #cy$ers"ace> has &efiitios that ra(e from coce"t%a' to techica', a& has $ee c'aime& $y some to $e a fo%rth &omai, 1here 'a&, sea a& air are the first three @K%eh' 6CC* There are %mero%s &efiitios of cy$ers"ace a& cy$er sec%rity

6 | Page

scattere& thro%(ho%t 'iterat%re* O%r itet is ot to e(a(e i a &e$ate o sematics, so 1e &o ot ic'%&e these &efiitios* Moreo+er, s%ch &e$ates are %ecessary for o%r "%r"ose, as 1e (eera''y %se the term #cy$er> ot as a o%, $%t as a a&-ecti+e that mo&ifies its s%$-ect 1ith the "ro"erty of s%""orti( a co''ectio of a%tomate& e'ectroic systems accessi$'e o+er  et1or0s* As 1e'' ref'ecte& i 'a(%a(e8%sa(e &e$ates i $oth the fie'& of co(iti+e 'i(%istics a& "o"%'ar 'iterat%re o 'e?ico(ra"hy, the 1ay 'a(%a(e is %se& $y a (i+e comm%ity $ecomes the &e facto &efiitio @immer 6CC, a& so 1e re=%est that o%r  rea&ers set asi&e the "ossi$i'ity that they 1i'' $e cof%se& $y refereces to #cy$ers"ace> a& #cy$er sec%rity> a& sim"'y refer to their o1 c%rret coce"t of these terms 1he it ma0es sese to &o so, 1hi'e 0ee"i( i mi& that 1e (eera''y the term cy$er as a a&-ecti+e 1hose &etai'e& attri$%tes 1i'' cha(e 1ith the system of iterest * At a hi(h 'e+e', cy$er sec%rity is ty"ica''y e?"'aie& i terms of a fe1 tria&s that &escri$e the o$-ecti+es of sec%rity "rofessioa's a& their metho&s, res"ecti+e'y @Bay%0 6C5C*  Three that com$ie to co+er most %ses of the term are  prevent, detect, respond   people, process, technology  confidentiality, integrity, and availability. These ref'ect the (oa's of cy$er sec%rity, the meas to achie+e cy$er sec%rity, a& the mechaisms $y 1hich cy$er sec%rity (oa's are achie+e&, res"ecti+e'y*  Prevent, detect, respond a&&resses (oa's commo to $oth "hysica' a& cy$er sec%rity* Tra&itioa''y, the "rimary (oa' of sec%rity "'ai( has $ee to "re+et a s%ccessf%' a&+ersary attac0* Ho1e+er, a'' sec%rity "rofessioa's are a1are that it is sim"'y ot "ossi$'e to "re+et a'' attac0s, a& so "'ai( a& "re"aratio m%st a'so ic'%&e metho&s to &etect attac0s i "ro(ress, "refera$'y $efore they ca%se &ama(e* Ho1e+er, 1hether or ot &etectio  "rocesses are effecti+e, oce it $ecomes o$+io%s that a system is threatee&, sec%rity ic'%&es the a$i'ity to res"o& to s%ch ici&ets* I "hysica' sec%rity, the term #first res"o&ers> refers to the heroic i&i+i&%a's i "o'icy, fire, a& emer(ecy me&ica' "rofessios* Res"ose ty"ica''y ic'%&es re"e''i( the attac0, treati( h%ma s%r+i+ors, a& safe(%ar&i( &ama(e& assets* I cy$er sec%rity, the thir& e'emet of the tria& is ofte state& i s'i(ht'y more o"timistic form* Rather tha #res"o&> it is #reco+er> or #correct*> This more "ositi+e e?"ectatio o the o%tcome of the thir& tria& acti+ity, to reco+er rather tha sim"'y res"o&, ref'ects the 'iterat%re of iformatio sec%rity "'ai(, 1herei sec%rity maa(emet is recomme&e& to ic'%&e com"'ete recostit%tio a& reco+ery of ay $%siess critica' system* Beca%se iformatio techo'o(y a''o1s &i+ersity, re&%&acy, a& recostit%tio for  the &ata a& "ro(rams re=%ire& to o"erate systems, iformatio sec%rity "rofessioa's e?"ect that &ama(e ca $e com"'ete'y a''aye&* I either case, the 'essos 'eare& i res"ose are e?"ecte& to iform "re+etio "'ai(, creati( a 'oo" of coti%o%s sec%rity im"ro+emet*  People, process, technology a&&resses metho&s commo to $oth techo'o(y maa(emet i (eera' a& to cy$er sec%rity maa(emet as a s"ecia'iFe& fie'&* This tria& o$ser+es that systems re=%ire o"erators, a& o"erators m%st fo''o1 esta$'ishe& ro%ties i or&er for systems to accom"'ish their missios* .he a""'ie& to sec%rity, this tria& hi(h'i(hts the fact that sec%rity is ot achie+e& $y sec%rity "rofessioa's a'oe, a& a'so that cy$er  sec%rity caot $e accom"'ishe& 1ith techo'o(y a'oe* The system or or(aiFatio to $e sec%re& is ac0o1'e&(e& to ic'%&e other h%ma e'e mets 1hose &ecisios a& actios "'ay a

7 | Page

+ita' ro'e i the s%ccess of sec%rity "ro(rams* E+e if a'' these "eo"'e ha& moti+atio a& iterest to $eha+e sec%re'y, they 1o%'& i&i+i&%a''y ot 0o1 ho1 to co''ecti+e'y act to  "re+et, &etect, a& reco+er from harm 1itho%t "re"'ae& "rocess* So sec%rity "rofessioa's are e?"ecte& to 1ea+e sec%rity "ro(rams ito e?isti( or(aiFatioa' "rocesses a& ma0e strate(ic %se of techo'o(y i s%""ort of cy$er sec%rity (oa's* Confidentiality, integrity, and availability a&&resses the sec%rity o$-ecti+es that are s"ecific to iformatio* )ofi&etia'ity refers to a systemGs ca"a$i'ity to 'imit &issemiatio of iformatio to a%thoriFe& %se* Ite(rity refers to a$i'ity to maitai the a%theticity, acc%racy, a& "ro+eace of recor&e& a& re"orte& iformatio* A+ai'a$i'ity refers to the time'y &e'i+ery of f%ctioa' ca"a$i'ity* These iformatio sec%rity (oa's a""'ie& to iformatio e+e $efore they 1ere o com"%ters, $%t the a&+et of cy$ers"ace has cha(e& the metho&s $y 1hich the (oa's are achie+e&, as 1e'' as the re'ati+e &iffic%'ty of (oa' achie+emet* Techo'o(ies to s%""ort cofi&etia'ity, ite(rity, a& a+ai'a$i'ity are ofte at o&&s 1ith each other* 9or e?am"'e, efforts to achie+e a hi(h 'e+e' of a+ai'a$i'ity for  iformatio i cy$ers"ace ofte ma0e it har&er to maitai iformatio cofi&etia'ity* Sorti( o%t -%st 1hat cofi&etia'ity, ite(rity, a& a+ai'a$i'ity meas for each ty"e of  iformatio i a (i+e system is the s"ecia'ty of the cy$er sec%rity "rofessioa'* )y$er  sec%rity refers i (eera' to metho&s of %si( "eo"'e, "rocess, a& techo'o(y to "re+et, &etect, a& reco+er from &ama(e to cofi&etia'ity, ite(rity, a& a+ai'a$i'ity of iformatio i cy$ers"ace* *2 E"GOVERNANCE

E8/o+erace or e/o+ meas %si( e'ectroic me&ia, "artic%'ar'y the 1e$, to &e'i+er   "%$'ic iformatio a& "%$'ic ser+ices e/o+erace a""'icatios em"o1er citiFes a& $%siesses to trasact /o+erace $%siess o8'ie that mi(ht other1ise re=%ire a tri" &o1to1* A(ecies $eefit, too, from re&%ce& "a"er1or0, im"ro+e& &ata$ases, a& icrease& efficiecy*

8 | Page

Iformatio a& )omm%icatio Techo'o(ies ca ehace the trasformatio of 1or0  c%'t%re $y ser+i( a +ariety of e&s, $etter &e'i+ery of /o+erace ser+ices to citiFes, im"ro+e& /o+erace iteractios 1ith $%siess a& i&%stry, citiFe em"o1ermet thro%(h access to iformatio a& "artici"atio for &ecisio8ma0i( a& more efficiet /o+erace maa(emet* e8/o+erace is ot meat o'y for itro&%ci( or %si( techo'o(ica' too's, it f%&ameta''y stri+es to $ri( a$o%t a cha(e i mi&set a& 1or0 c%'t%re to ite(rate /o+erace "rocesses a& f%ctios to ser+e the citiFes $etter* I this "rocess, it is cr%cia' that the ca"acity of /o+erace to $e o"e to criticism as 1e'' as the a""'icatio of e1 socia' cotract $et1ee a'' sta0eho'&ers, cofirmi( a share& res"osi$i'ity o the trasformatio "rocesses*   The iteractio $et1ee a citiFe a& a /o+erace a(ecy ta0e s"ace i a /o+erace office* .ith emer(i( Iformatio a& )omm%icatio techo'o(ies it is "ossi$'e to 'ocate ser+ice ceters c'ose& to c'iets* I a'' the cases "%$'ic tra&itioa''y 'oo0 for iformatio a& ser+ices a&&ressi( his or her ee&s a& i $oth cases =%a'ity, re'e+ace a& efficiecy are of   "aramo%t im"ortace* Therefore, the esta$'ishmet of e8/o+erace re=%ires a (oo& 0o1'e&(e of the ee&s that e?ist i the society a& that ca $e offere& %si( I)T* The effecti+eess of I)T i /o+erace is c'ose'y re'ate& 1ith the ca"acity of /o+erace to i&%ce a c%'t%re cha(e8"'aci( et1or0 1ithi its istit%tios as istr%meta' to tras"arecy a& 0o1'e&(e e?cha(e a& creatio* I E8/o+erace, /o+erace ma0es $est "ossi$'e %se of iteret techo'o(y to comm%icate a& "ro+i&e iformatio to commo "eo"'es a& $%siessma* To&ay, e'ectricity, 1ater, "hoe a& a'' 0i&s of $i''s ca $e "ai& o+er the iteret* A'' this is 1hat /o+erace a& citiFes is %si( a& &oi(* A'' are &e"e&et o iteret a& 1he citiFes &e"e&s o /o+erace iteret ser+ices a'' that come is E8/o+erace*

There are fo%r "i''ars of E8/o+erace8 * CONNECTIVITY8)oecti+ity is re=%ire& to coect the "eo"'e to the ser+ices of the /o+erace* There sho%'& $e a stro( coecti+ity for a effecti+e e8(o+erace* 2* NO7LEDGE: " Here 0o1'e&(e refers to IT 0o1'e&(e* /o+erace sho%'& em"'oy s0i'' f%'' e(ieers 1ho ca ha&'e the e8(o+erace i a efficiet 1ay* These e(ieers a'so ha&'e a'' 0i& of fa%'t that may occ%r &%ri( the 1or0i( of e8(o+erace* 3* DATA CONTENT: " To share ay 0i& of 0o1'e&(e or iformatio o+er the iteret, there sho%'& $e its &ata$ase* This &ata$ase sho%'& ha+e the &ata cotet 1hich is re'ate& to /o+erace ser+ices* !* CAPITAL:")a"ita' ca $e o "%$'ic or "ri+ate "artershi"* It refers to moey %se& $y /o+erace to "ro+i&e their ser+ices or to that sector of the ecoomy $ase& o its o"eratio

9 | Page

Fi-*3 Pi//)s o8 eGo9e)nn6e

I this "a"er, 1e &isc%ss a$o%t the #Ro'e of cy$er sec%rity i &ifferet i e /o+erace> )y$ersec%rity starts 1ith a %&ersta&i( of yo%r critica' assets a& the threats yo% face* O'y the yo% ca &e+ise strate(ies to maa(e yo%r ris0se+e if yo% caot e'imiate them* A 'ife8cyc'e a""roach to sec%rity marries the strate(y of costat "rocess im"ro+emet to the o"eratioa' tactics of coti%a' moitori( a& &efese i &e"th* I this +ie1, cy$er   "rotectio, &efese, res"ose, a& reco+ery are o(oi( cocers, each re=%iri( a "'a*E8 /o+erace sec%rity is cosi&ere& oe of the cr%cia' factors for achie+i( a a&+ace& sta(e of e8/o+erace* As the %m$er of e8/o+erace ser+ices itro&%ce& to the %ser icreases, a hi(her 'e+e' of e8/o+erace sec%rity is re=%ire& This "a"er cotri$%tes to the e8/o+erace 'iterat%re $y esta$'ishi( a aa'ytica' frame1or0  for %&ersta&i(, c'arificatio a& i+esti(atio of the maa(emet iss%es i+o'+e& i im"ro+i( e8/o+erace sec%rity i techo'o(ica''y8&e+e'o"i( co%tries*

10 | P a g e

2*Con6e&s 2* E"Go9e)nn6e 6on6e& The coce"t of a e8/o+erace system is to "ro+i&e access to /o+erace ser+ices ay1here at ay time o+er o"e et1or0s* This 'ea&s to iss%es of sec%rity a& "ri+acy i the maa(emet of the iformatio systems* Maa(i( s%ch iss%es i the "%$'ic sector has &ifferet em"hases tha i the "ri+ate sector* The $roa&er e8/o+erace a""roach is socio8 techica' $y at%re, i+o'+i( "eo"'e a& "rocesses as 1e'' as techo'o(iesJ hece,  "artic%'ar'y i trasitioa' co%tries, the socia' c%'t%re a& characteristics of the co%try are factors i s%ccessf%' e8/o+erace &e+e'o"met* I the o"e 'iterat%re there are fo%r &istict as"ects to e8/o+erace* The remai&er of this sectio (i+es a o+er+ie1 of this 'iterat%re*

2*2 E9o/#&ion o8 E"Go9e)nn6e /'o$a' shifts to1ar&s icrease& &e"'oymet of IT $y /o+eraces emer(e& i the ieties, 1ith the a&+et of the .or'& .i&e .e$ @...* The techo'o(y as 1e'' as e8(o+erace iitiati+es ha+e come a 'o( 1ay sice the* .ith the icrease i Iteret a& mo$i'e coectios, the citiFes are 'eari( to e?"'oit their e1 mo&e of access i 1i&e ra(i( 1ays* They ha+e starte& e?"ecti( more a& more iformatio a& ser+ices o'ie form /o+eraces a& cor"orate or(aiFatios to f%rther their ci+ic, "rofessioa' a& "ersoa' 'i+es, th%s creati( a$%&at e+i&eces that the e1 e8citiFeshi"G is ta0i( ho'&* The coce"t of e8/o+erace has its ori(is i I&ia &%ri( the se+eties 1ith a foc%s o &e+e'o"met of i8ho%se /o+erace a""'icatios i the areas of &efese, ecoomic moitori(, "'ai( a& the &e"'oymet of IT to maa(e &ata itesi+e f%ctios re'ate& to e'ectios, ces%s, ta? a&miistratio etc* The efforts of the Natioa' Iformatics )eter @NI) to coect a'' the &istrict hea&=%arters &%ri( the ei(hties 1as a +ery si(ificat &e+e'o"met*

11 | P a g e

Fi-*! E9o/#&ion o8 Go9e)nn6e

9rom the ear'y ieties, IT techo'o(ies 1ere s%""'emete& $y I)T techo'o(ies to e?te& its %se for 1i&er sect ora' a""'icatios 1ith "o'icy em"hasis o reachi( o%t to the r%ra' areas a& ta0i( i (reater i"%ts from N/OGs a& "ri+ate sector as 1e''* There has $ee icreasi( i+o'+emet of iteratioa' &oor a(ecies %&er the frame1or0 of e8(o+erace for &e+e'o"met to cata'yFe the &e+e'o"met of e8(o+erace 'a1s a& techo'o(ies i &e+e'o"i( co%tries * .hi'e the em"hasis has $ee "rimari'y o a%tomatio a& com"%teriFatio, state /o+eraces ha+e a'so e&ea+ore& to %se I)T too's ito coecti+ity, et1or0i(, setti( %" systems for "rocessi( iformatio a& &e'i+eri( ser+ices* At a micro 'e+e', this has ra(e& from IT a%tomatio i i&i+i&%a' &e"artmets, e'ectroic fi'e ha&'i( a& 1or0f'o1 systems, access to etit'emets, "%$'ic (rie+ace systems, ser+ice &e'i+ery for hi(h +o'%me ro%tie trasactios s%ch as "aymets of $i''s, ta? &%es to meeti( "o+erty, a''e+iatio (oa's thro%(h the "romotio of etre"ree%ria' mo&e's a& "ro+isios of mar0et iformatio* The thr%st has +arie& across iitiati+es, 1ith some foc%si( o ea$'i( the citiFe8state iterface for +ario%s /o+erace ser+ices, a& others foc%si( o $etteri( 'i+e hoo&s* E+ery state /o+erace has ta0e the iitiati+es to form a IT tas0 force to o%t'ie IT "o'icy &oc%met for the state a& the citiFe charters ha+e starte& a""eari( o /o+erace 1e$sites* 9or /o+eraces, the more o+ert moti+atio to shift from ma%a' "rocesses to IT8 ea$'e& "rocesses may icrease& efficiecy i a&miistratio a& ser+ice &e'i+ery, $%t this shift ca $e cocei+e& as a 1orth1hi'e i+estmet 1ith "otetia' for ret%rs*

2*3C($e) se6#)i&( 6on6e& in e Go9e)nn6e 12 | P a g e

)y$er Sec%rity is tra&itioa''y cocere& 1ith iformatio "ro"erties of cofi&etia'ity, ite(rity a& a+ai'a$i'ity* These "ro"erties %&er"i ser+ices s%ch as %ser a%theticatio, a%thoriFatio, acco%ta$i'ity a& re'ia$i'ity* M%ch has $ee "%$'ishe& o the cha(i( ro'e of  cy$er sec%rity @Dhi''o a& Tor0Fa&eh, 6CC
13 | P a g e

im"ortace sice it ca if'%ece /o+eracesG a& %sersG 1i''i(ess to a&o"t the o'ie ser+ices offere&* The E%ro"ea 7ar'iamet, +ia the Science and Technology Options and   Assessment has as0e& The E%ro"ea Techo'o(y Assessmet /ro%" @ETA/, 1hich ic'%&es

3* A/i6&ion 3* REAL LIFE APPLICATION OF e"Go9e)nn6e

7e$"$se' )e6)e&ion 8ie/' n' 86i/i&( s6.e'#/in-

O'ie iteracti+e ma"s sho1s city streets a& ei(h$orhoo&s, ic'%&i( $a'' fie'&s, teis co%rts, a& other "ar0s  recreatio faci'ities* )oaches, "'ayers, 'ea(%es, schoo's a& i&i+i&%a's ca +isit the &e"artmeta' 1e$ site from home or office, at ay ho%r, 1ee0e&s  1ee0&ays* Users of the o'ie system ca 'ocate faci'ities $y ame, ei(h$orhoo& or street a&&ress* They ca =%ery the &ata$ase to fi& a+ai'a$'e fie'&s, co%rts, etc* for s"ecific times a& &ates* The iteracti+e ma" ca co'or8co&e faci'ities, $ase& o a+ai'a$i'ity, sim"'ifyi( the "rocess of fi&i( a a+ai'a$'e faci'ity that is a'so ear$y* Iteracti+e ma"s are easi'y "rite& &irect'y from the e/o+ 1e$ site* A&+ace& systems ca acce"t reser+atios o'ie, a& co''ect a""ro"riate fees "ai& +ia cre&it car&*

On/ine /n' o;ne)s.i %s n' &< 9/#&ion

O'ie ma"s sho1i( rea' estate ma"s, ic'%&i( streets, "ro"erty $o%&aries a& "ro"erty &escri"tios* To fi& a "arce', citiFes ty"e a street a&&ress or a+i(ate %si( a iteracti+e Yahoo8'i0e ma"* By Foomi( i o a street or "arce', %sers ca see "ro"erty $o%&ary 'ies a& &escri"ti+e iformatio &ra1 a%tomatica''y from "%$'ic &ata$ases* 7rit a ma" a&!or  re"ort a$o%t the "arce'*

14 | P a g e

Fi-*4 Y.oo M

A#&o"no&i8i6&ion o8 )o' )ei) = 6ons&)#6&ion

O'ie iteracti+e ma"s sho1i( %"8to8&ate 'ocatios of c%rret a& "ro-ecte& roa& or other  costr%ctio "ro-ects* This 'ist a& ma" is %"&ate& a%tomatica''y as city staff a&& to or e&it a o'ie &ata$ase* A&+ace otice ca 'ea& tra+e'ers to "ic0 a'terati+e ro%tes, a+oi&i( the aoyace, &e'ays  "o''%tio re'ate& to %e?"ecte& roa& co(estio* O"tio O"t8i a%to8emai's to a'ert ear$y citiFes!$%siess if costr%ctio mi(ht affect them* On/ine s&)e% >#/i&( %oni&o)in-

)%rret'y a +ariety of +o'%teers s%r+ey stream or other 1ater1ay co&itios* A iteracti+e ma" system co%'& co''ect their o$ser+atios %si( o'ie forms, the imme&iate'y %"&ate iteracti+e ma"s* T%r$i&ity, &e$ris, a&!or other stream co&itios 1o%'& $e sym$o'iFe& or  co'ore& &ifferet'y $ase& o s%r+ey +a'%es i the o'ie &ata$ase* The 1e$8$ase& iteracti+e ma"s 1o%'& i''%strate stream co&itios, he'"i( stream ste1ar&s maa(e their 1ater1ays a& he'"i( e&%cate yo%( "eo"'e a$o%t e+irometa' affairs* Data8&ri+e 1e$ ma" soft1are 1o%'& %"&ate the ma"s a%tomatica''y, as &ata$ase recor&s are a&&e& or %"&ate&* E?am"'e P; 9ish  /ame, Hea'th On/ine .)9es& )e %s n' .e/&. ;)nin-s

)reate a o'ie 1e$ ma" a""'icatio, $ase& o a &ata$ase of fish or she''fish har+est areas* The 1e$ ma" system 1o%'& a''o1 %sers to iteracti+e'y Foom i to see shore'ie &etai's, $oat faci'ities, etc* or Foom $ac0 for a 1i&er8area +ie1s* The &ata8&ri+e ma" co%'& %se co'ors or  sym$o's to (ra"hica''y f'a(areas 1here the seaso is o"e a& a'so areas affecte& $y re& ti&e, i&%stria' "o''%tio, etc* Seaso a& har+est co&itios ca cha(e ra"i&'y* The o'ie system ma0es it "ossi$'e to comm%icate cha(es imme&iate'y a& efficiet'y* To maitai the ma", 9ish  /ame or  Hea'th staff 1o%'& %"&ate +a'%es i &ata ta$'es i $ac0(ro%& &ata$ase* The iteracti+e 1e$ ma" soft1are a%tomatica''y refreshes the ma" $ase& o the e1 iformatio* O"tio A%to8 otificatio $y emai', for $ait sho"s, $oat reta's, 'icese ho'&ers, "%$'ic safety a(ecies, a& ay others 1ho choose to si( %" for o"tioa' a'erts* On/ine B/o6? 7&6. = C)i%e in6i'en6e %s

O'ie ma"s 'et citiFes a+i(ate to their ei(h$orhoo& $y ty"i( a a&&ress, itersectio, comm%ity ame, or Fi" co&e* Users &is"'ay ma"s of recet $%r('aries, car "ro1's, or other  comm%ity safety e+ets* The &ata8&ri+e ma""i( system may a%tomatica''y co'or8co&e e+et 'ocatios $y ty"e of e+et, &ate!time, or mo&%s o"era&i* Nei(h$ors may "rit ma"s from their 1e$ $ro1sers for off'ie %se or to "ost at the corer store* O"tioa''y, resi&ets co%'& re(ister to recei+e a%to8emai's if, for e?am"'e, there 1as a attem"te& $rea08i ear them* Simi'ar'y ei(h$ors co%'& %se o'ie forms to =%ic0'y share

15 | P a g e

iformatio a$o%t e+erythi( from s%s"icio%s e+ets, to a$a&oe& +ehic'es, to ei(h$orhoo& yar& sa'es*

E Go9 E<%/es •

7%$'ic ser+ices a& comm%ity statistics Icrease citiFe "artici"atio a& a1areess  $y ma0i( it easy to o$tai %"8to8&ate ma"s a& re"orts of ser+ices, faci'ities, a& statistics*

•

Hea'th co&itios a& e"i&emio'o(y system The U* S* )eter for Disease )otro' he'"s "re+et &isease a& acci&ets $y "reseti( ici&ece, morta'ity, a& other  statistics %si( this iteracti+e 1e$ ma" system

•

Iteracti+e $icyc'e ro%te ma"s

•

7o''i( "'ace 'ocator system Eco%ra(e +oti( $y ma""i( c%rret "o''i( "'aces  $ase& o +oter a&&ress*

•

Schoo' $%s ro%te fi&er system Im"ro+e c%stomer ser+ice $y 'etti( "arets fi& the earest schoo' $%s ro%te*

•

Ecoomic &e+e'o"met system 7romote ecoomic &e+e'o"met $yma""i(   "rofi'i( a+ai'a$'e i&%stria'  commercia' sites*

•

Ta? rate 'ocator Im"ro+e ta? ret%r acc%racy a& icrease ta? co''ectios $y 'etti(  $%siess ma" their 'ocatios +is a +is $o%&aries of Loca' Im"ro+emet &istricts a& other s"ecia' assessmet Foes * )omm%ity ser+ices 'ocator Im"ro+e "%$'ic access to e?isti( ser+ices $y ma""i( 'ocatios of e'&er'y ser+ices, comm%ity hea'th c'iics, 'itt'e city ha''s, a& comm%ity "o'ice offices * Assiste& ho%si( 'ocator He'" fami'ies a& e'&er'y choose s%$si&iFe& ho%si( %its  $y ma""i( a+ai'a$'e %its  sho1i( "ro?imity to trasit a& other faci'ities*

•

•

3*2 A/i6&ion n' E"Go9e)nn6e Se)9i6es En&e))ise A/i6&ions E"P(%en&

16 | P a g e

The E87aymet "ro+i&es the ca"a$i'ity for ay e8commerce 1e$site to acce"t e'ectroic  "aymet metho&s* This ser+ice a''o1s ay 1e$ a""'icatio to ea$'e its c%stomers to ma0e  "aymets o'ie* 9eat%res ic'%&e •

Desi( 1ith /o+erace i mi&

•

Acce"ts ma-or cre&it car&s a& e8chec0s

•

9'e?i$'e $atchi(!%"&ate of iformatio

•

Off8'ie "aymet "rocessi(

•

A&&ress +erificatio ser+ices

Fi-*@ E"P(%en&

En&e))ise A#&.o)i&ion = A#&.en&i6&ion Eter"rise AA is the State of Io1as share& 'o(o ser+ice* It ha&'es %ser re(istratio, acco%t maa(emet @'i0e cha(i( a& reco+eri( "ass1or&s a& sim"'e "ri+i'e(e maa(emet f%ctios*

The ser+ice 'ets %sers e-oy ha+i( -%st oe acco%t to (i+e them access to m%'ti"'e a""'icatios a& a cosistet 1ay to maa(e that acco%t* Im"'emeti( a commo acco%t reso%rce ma0es it 'ess e?"esi+e a& easier to offer m%'ti"'e ser+ices a& a""'icatios to citiFes a& em"'oyees a'i0e* 9eat%res ic'%&e •

Use of commo i&etifiers across m%'ti"'e "'atforms a& ser+ices

•

A''o1s creatio of acco%ts for the "%$'ic a& other o8em"'oyees

•

7ermits se'f8re(istratio $y %sers creati( e1 acco%ts

•

Esta$'ishes a""'icatio8s"ecific ca"a$i'ities

17 | P a g e

Fi-*En&e))ise A#&.o)i&ion = A#&.en&i6&ion Sin-/e Con&6& Reosi&o)( 1SING

The Si('e )otact Re"ository @SIN/ is a iteret a""'icatio &e+e'o"e& a& s"osore& $y the State De"artmet of A&miistrati+e Ser+ices ! Iformatio Techo'o(y Eter"rise that a''o1s re(istere& %sers to "erform $ac0(ro%& chec0s o "otetia' em"'oyees, +o'%teers, a& st%&ets &oi( c'iica', from a si('e 1e$ scree* The a""'icatio 'ets a %ser chec0 Io1a crimia' history, three a$%se re(istries @chi'&, &e"e&et a&%'t, a& se? offe&er, a& o+er :C 7%$'ic Hea'th "rofessioa' 'icese ty"es from oe c'ic0 o the scree* This &ata resi&es o +ario%s "'atforms 1ithi Io1a state/o+erace, ic'%&i( a maiframe a& se+era' &e"artmeta' LAN ser+ers* SIN/ "erforms its $ac0(ro%& chec0s a(aist the ori(ia' re(istries, rather tha %si( "oit8i8time co"ies, 1hich $ecome o%t8of8&ate $et1ee refreshes* I a&&itio to es%ri( that em"'oyers recei+e %"8to8&ate iformatio, SIN/s techi=%e "ro+i&es a e?tra meas%re of sec%rity* Each cofi&etia' &ata$ase is store& i its ori(ia' sec%re 'ocatio, a& o1here e'se* No &ata resi&es o the 1e$ ser+er itse'f* This meas that SIN/ m%st comm%icate 1ith m%'ti"'e &ata$ases @from &ifferet +e&ors o m%'ti"'e "'atforms @a'so from &ifferet +e&ors* Some of the &ata$ases accesse& ic'%&e SQL, Orac'e, Sy$ase, a& a maiframe )A!IDMS* The SIN/ 1e$ site is a sec%re& site 8 o'y re(istere& %sers ca access the iformatio* De"e&i( o 1hat ty"e of a or(aiFatio they are &etermies to 1hich of the &ata$ases they ha+e 'e(a' access* This is &oe $y "%tti( them i (ro%"s, 1ith the (ro%" ha+i( access o'y to certai &ata$ases, or a'' of them* The a""'icatio is %se& $y o+er 5,CCC %sers each moth, &oi( a a+era(e of 5,;CC trasactios, or searches, a moth* This a""'icatio has

18 | P a g e

e?"e&ite& the "rocess of chec0i( $ac0(ro%&s of em"'oyees a& +o'%teers as ofte re=%ire&  $y re(%'atios a& "o'icies*

eLe9e

eLea+e Ser+ice a''o1s em"'oyees a& s%"er+isors to i"%t a& re+ie1 'ea+e re=%ests 1hi'e %si( the iteret* As 'o( as the iteret is a+ai'a$'e, a "erso ca i"%t 'ea+e re=%ests a& re+ie1 re=%ests* This "ro+i&es a easy 1ay for s%"er+isors to =%ic0'y see 1ho has re=%este& 'ea+e as 1e'' as those 1ho ha+e 1or0e& o+ertime* They ca a'so a""ro+e or &ey a re=%est* This "ro+i&es a =%ic0 fee&$ac0 to the "erso re=%esti( the 'ea+e* The fo''o1i( items are a+ai'a$'e •

Vie1 yo%r most recet re=%ests

•

Eter a e1 re=%est

•

Vie1 re=%ests that are "e&i( or re+ie1e&

•

Search "re+io%s'y etere& re=%ests

•

E?"ort the iformatio

•

Vie1 a ca'e&ar 1ith yo%r 'ea+e re=%ests

•

Vie1 a ca'e&ar 1ith the 'ea+e re=%ests of yo%r &e"artmet* This a''o1s each "erso to +ie1 1ho has re=%este& 'ea+e* It &oes ot "ro+i&e the &etai's of the 'ea+e re=%ests*

19 | P a g e

A'')ess V/i'&ion

A&&ress Va'i&atio is the +erificatio of a&&ress iformatio* The ser+ice %ses a &ata$ase s%""'ie& $y the Uite& States 7osta' Ser+ice @US7S to &etermie if a a&&ress is a &e'i+era$'e a&&ress* The ser+ice 1i'' a'so ret%r the a&&ress i the sta&ar&iFe& US7S format* The ser+ice ca $e accesse& either $y "ro+i&i( a fi'e 1hich 1i'' $e r% as a $atch "rocess or   $y s%$mitti( a&&resses oe at a time to o%r 1e$ ser+ice* I a&&itio to the ret%r of the a&&ress itse'f, 1e ca a'so "ro+i&e a&&itioa' iformatio s%ch as co%ty %m$er, co%ty ame, (eo co&e a& co(ressioa' &istrict* A a&&itioa' item that is offere& is the Natioa' )ha(e of A&&ress* If yo% "ro+i&e 5CC or more %i=%e a&&resses, 1e ca "rocess the fi'es thro%(h the Natioa' )ha(e of A&&ress @N)OA &ata to &etermie if the "erso, fami'y or   $%siess has mo+e&* If the mo+e is 1ithi the 'ast 5 moths, 1e ca ret%r the e1 a&&ress* .e ca a'so "ro+i&e iformatio &etai'i( if the mo+e is for a i&i+i&%a', a fami'y or a  $%siess* There are may a&+ata(es to a&&ress +erificatio 

A&&resses i a &ata$ase ca $e searche& more effecti+e'y as they are i the same format* The s"e''i(s of streets a& cities are the same thro%(ho%t the &ata$ase* 7osta' &isco%ts ca $e o$taie& 1he the a&&resses are sta&ar&iFe& a& "rocesse& thro%(h the N)OA* A(ecies ca see a &ecrease of as m%ch as 5C cets "er item mai'e&*

Se)9i6e"O)ien&e' A)6.i&e6&#)e 1SOA

Ser+ice8Oriete& Architect%re @SOA is a Uti'ity that "ro+i&es the ser+ice oriete& ifrastr%ct%re for %se $y state a(ecies* SOA has $ee a&o"te& as a sta&ar& for soft1are &e+e'o"met, to &ri+e re%se amo( a(ecies a& foster (reater shari( of iformatio* A SOA A&+isory )ommittee 1as create& $y the Techo'o(y /o+erace Boar& to &e+e'o" sta&ar&s for IT8re'ate& iitiati+es 1ithi the Boar&s "%r+ie1* The )ommittee is 'e& $y DAS8 ITE 1ith +o'%teer mem$ers from State a(ecies a& o+ersi(ht $y the )IO @-oit co%ci' of  'ar(e8a(ecy )IOs*

20 | P a g e

!* ROLE OF CYBER SECURITY

4.1 Typical roles

Fig.8 Typical roles INCIDENT & THREAT MANAGEMENT & FORENIC 9rot 'ie Defe&ers maa(i( et1or0s a& mo$i'e &e+ices* E?am"'es are maa(i( et1or0 to 0ee" attac0ers o%tJ testi( otherGs et1or0s to assess their sec%rity a& a&+isi( o ma0i( them 'ess +%'era$'eJ ici&et maa(ersJ foresics aa'ysts %"ic0i( 1hat ha""ee&J aa'ysts of e1 ma'1are!"ro&%ctio of co%termeas%res* @7'ease ote the e8crime %it has o1 $ee a$sor$e& ito the N)A

RI! ANA"#T & MANAGEMENT Ris0 Aa'ysts a& Maa(ers ee& to %&ersta& 1hich threats 1i'' ha+e the 1orst $%siess im"act a& a&+ise Boar&s i o8techica' 'a(%a(e 1hy a& ho1 they sho%'& s"e& o re&%ci( these ris0s* Ris0 maa(ers may $e o8techica' or techica' "eo"'e* Some a%&it et1or0s a& es%re com"'iace a& 'e(a' iss%es are &ea't 1ith*

PO"IC# MA!ER & TRATEGIT

21 | P a g e

7o'icy Ma0ers a& Strate(ists &efie ho1 a com"ay &ea's 1ith &ifferet sec%rity ris0s a& meets its 'e(a' o$'i(atios a& (ets these "o'icies im"'emete&* 7ri+ate sector has )ISOs @)hief Iformatio Sec%rity Officers ofte s%""orte& $y a team* /o+erace has ITSOs @IT sec%rity officers a& DSOs @De"artmeta' sec%rity officers*

OPERATION & EC$RIT# MANAGEMENT O"eratios a& Sec%rity Maa(ers "rotect &ata o et1or0s, 'a"to"s a& mo$i'e &e+ices, they may maa(e ecry"tio a& other "rotecti+e meas%res 'i0e fire1a'' r%'es*

ENGINEERING% ARCHITECT$RE & DEIGN E(ieeri(, Architect%re a& Desi( Desi(i( sec%re co&e a& a""'icatiosJ architecti( a sec%re system or creati( e1 sec%rity too's are a'' essetia' "arts of cy$er sec%rity $%t othi( stays sti'' so yo% 1i'' ee& to 0ee" cha(i( fast*

ED$CATION% TRAINING AND AARENE E&%catio Traii( a& A1areess are &ema&i( 1hether the -o$ is a$o%t traii( e1comers, 0ee"i( e?"erts %" to &ate or ea$'i( staff or c%stomers to $eefit f%''y from techo'o(y they are %si(*

REEARCH Research may $e hi(h'y techica' or more "o'icy or "sycho'o(y orietate&* Areas ic'%&e  )om"'e? mo&e's to he'" %&ersta& a& maa(e ris0s* i+etio of e1 techo'o(ies or e1 1ays to a""'y them to re&%ce ris0sJ 'oo0i( for the e?t #$i( thi(>*

"A#ER PECIA"IING IN AD'ICE AND PROEC$TION FOR INTERNET CRIME AND DATA PROTECTION La1yers s"ecia'iFi( i the a&+ice a& "rosec%tio of &ata sec%rity a& Iteret crime* The ee& for e?"ert a&+ice is (ro1i( 1ith hi(h 'e+e's of crime a& "ea'ties for or(aiFatios that &oGt "rotect &ata s%fficiet

!*2 e( o8 6($e) se6#)i&( •

•

System a&miistratio c'iet systems a& ser+ersJ  Net1or0 a&miistratio a& et1or0 sec%rity o"eratiosJ

•

Sec%rity assessmet, sec%rity a%&iti( a& iformatio ass%raceJ

•

Threat aa'ysis, itr%sio a& &ata aa'ysis, ite''i(ece a& co%ter ite''i(eceJ

22 | P a g e

•

9oresics i+esti(atioJ

•

7ro(rammi(J

•

Techica' 1riti(J

•

Sec%rity architect%re a& e(ieeri(J a&

•

Iformatio sec%rity a& ici&et maa(emet* Systems a&miistrators, et1or0 a&miistrators, those 1ho 1rite co&e are ty"ica''y ot i&etifie& as cy$ersec%rity ty"es, Ree&er sai& i a iter+ie1 T%es&ay* B%t 1hat they &o or  the maer i 1hich they &o it is critica' $oth to &e"'oyi( techo'o(y that is to the e?tet that 1e ca ma0e it safe a& (i+e that there is o s%ch thi( as a$so'%te'y safe techo'o(y, ha+i( the s0i''s ecessary to "rotect it a& &efe& it a& %'timate'y reco+er 1he $a& st%ff  ha""es $eca%se $a& st%ff 1i'' ha""e* The 9e&era' )hief Iformatio Officers )o%ci' a& the Office of 7ersoe' Maa(emet, as 1e'' as other or(aiFatios, are 1or0i( to &e+e'o" occ%"atioa' c'asses for cy$ersec%rity  "rofessioa's, a& the commissio recomme&atios are aime& at i&etifyi( the 0ey ro'es i cy$ersec%rity, the f%ctios they "erform a& the s"ecific s0i''s 8 ic'%&i( re=%isite traii( a& e&%catio 8 re=%ire& to &o those -o$s* Occ%"atioa' c'assificatios for IT sec%rity 1ithi /o+erace 1o%'& he'" sim"'ify recr%iti( 8 recr%iters 1o%'& 0o1 the s"ecific e?"ertise to see0 8 a& faci'itate traii( $y &efii( 1hat s0i''s ee& to $e &e+e'o"e&* To&ay, most cy$ersec%rity "rofessioa's are c'assifie& as iformatio techo'o(y s"ecia'ists* Beca%se cy$ersec%rity 1or0 is "erforme& i may &ifferet "ositios a& "'aces thro%(ho%t the fe&era' /o+erace, it is ot easy to i&etify them $y 'oo0i( so'e'y at -o$ tit'es or  or(aiFatio charts, oh Berry, &irector of the Office of 7ersoe' Maa(emet, sai& 'ast  No+em$er 1he he %+ei'e& the /o+eraces IT sec%rity c'assificatio iitiati+e* By reachi( a coses%s o the ro'es a& re=%isite s0i''s, the commissio re"ort says, e&%cators 1o%'& ha+e a m%ch $etter %&ersta&i( of the 'a$or mar0et their (ra&%ates 1i'' eter, "%rchasers of cy$ersec%rity ser+ices co%'& more c'ear'y s"ecify the =%a'ificatios they see0 from ser+ice "ro+i&ers a& the sometimes cof%si( re(ime of "rofessioa' certificatios "ro(rams co%'& ref'ect the ee&s of "otetia' em"'oyees* IMPROVING SECURITYIN E"GOVERNENCE

To ma0e iformatio a+ai'a$'e to those 1ho ee& it a&1ho ca $e tr%ste& 1ith it, a ro$%st &efese re=%ires a f'e?i$'e strate(y that a''o1s a&a"tatio to the cha(i( e+iromet, 1e''8

23 | P a g e

&efie& "o'icies a& "roce&%res, the %se of ro$%st too's, a& costat +i(i'ace* It is he'"f%' to  $e(i a sec%rity im"ro+emet "ro(ram $y &etermii( the c %rret state of sec%rity at the site* Metho&s for ma0i( this &etermiatio i a re'ia$'e 1ay are $ecomi( a+ai'a$'e* Ite(ra' to a sec%rity "ro(ram 2;3 are &oc%mete& "o'icies a& "roce&%res, a& techo'o(y that s%""ort their im"'emetatio*  A. Security policy

If it is im"ortat to $e sec%re, the it is im"ortat to $e s%re* A'' of the sec%rity "o'icy is eforce& $y mechaisms that are stro( eo%(h* There are or(aiFe& metho&o'o(ies a& ris0  assessmet strate(ies to ass%re com"'eteess of sec%rity "o'icies a& ass%re that they are com"'ete'y eforce&* I com"'e? systems, s%ch as iformatio systems, "o'icies ca $e &ecom"ose& ito s%$8"o'icies to faci'itate the a''ocatio of sec%rity mechaisms to eforce s%$8"o'icies* A "o'icy is a &oc%mete& hi(h8'e+e' "'a for or(aiFatio81i&e com"%ter a& iformatio sec%rity* It "ro+i&es a frame1or0 for ma0i( s"ecific &ecisios, s%ch as 1hich &efese mechaisms to %se a& ho1 to cofi(%re ser+ices, a& is the $asis for &e+e'o"i( sec%re "ro(rammi( (%i&e'ies a& "roce&%res for %sers a& system a&miistrators to fo''o1* Beca%se a sec%rity "o'icy is a 'o(8term &oc%met, the cotets a+oi& techo'o(y8s"ecific iss%es*  Defiitio of acce"ta$'e %se for %sers  /%i&e'ies for reacti( to a site com"romise*  Hi(h8'e+e' &escri"tio of &ie techica' e+iromet of the site, the 'e(a' e+iromet @(o+eri( 'a1s, the a%thority of the "o'icy, a& the $asic "hi'oso"hy to $e %se& 1he iter"reti( the "o'icy  Ris0 aa'ysis that i&etifies the sites assets, the threats that e?ist a(aist those assets, a& the costsof asset 'oss  /%i&e'ies for system a&miistrators o ho1 to maa(e systems

24 | P a g e

Fi-* Se6#)i&( o/i6(  B. Security Practices

The &ai'y $arra(e of s"am, o1 ifeste& 1ith Fero8&ay ma'1are attac0s, ot to metio the ris0s of ma'icio%s isi&ers, ifecte& 'a"to"s comi( a& (oi( $ehi& the "ac0et8is"ecti( fire1a''s a& cy$er8attac0s8"re+etio systems is the fact of et1or0e& comm%icatio to&ay* This esta$'ishes ee& for ste"s of &%e care a& &%e &i'i(ece to1ar&s a re(%'atory com"'iace, 1hich m%st $e "%t i "'ace for smooth o"eratios, if ot i e?istece a'rea&y* System a&miistratio "ractices "'ay a 0ey ro'e i et1or0 sec%rity* )hec0'ists a& (eera' a&+ice o (oo& sec%rity "ractices are rea&i'y a+ai'a$'e* Be'o1 are e?am"'es of commo'y recomme&e& "ractices  Es%re a'' acco%ts ha+e a "ass1or& a& that the"ass1or&s are &iffic%'t to (%ess* A oe8 time "ass1or& system is "refera$'e*  Use too's s%ch as MD; chec0s%ms @, a stro( cry"to(ra"hic techi=%e, to es%re the ite(rity of system soft1are o a re(%'ar $asis*  Use sec%re "ro(rammi( techi=%es 1he 1riti( soft1are* These ca $e fo%& at sec%rity8 re'ate& sites o the .or'& .i&e .e$*  Be +i(i'at i et1or0 %se a& cofi(%ratio, ma0i( cha(es as +%'era$i'ities $ecome 0o1*  Re(%'ar'y chec0 1ith +e&ors for the 'atest a+ai'a$'e fi?es a& 0ee" systems c%rret 1ith %"(ra&es a& "atches* Re(%'ar'y chec0 o8'ie sec%rity archi+es, s%ch as those maitaie& $y ici&et res"ose Iteratioa' )oferece o )om"%ter Sciece a& Iformatio Techo'o(y @I))SIT6C55 7attaya Dec* 6C55 566 teams, for sec%rity a'erts a& techica' a&+ice*  A%&it systems a& et1or0s, a& re(%'ar'y chec0 'o(s* May sites that s%ffer com"%ter  sec%rity ici&ets re"ort that is%fficiet a%&it &ata isco''ecte&, so &etecti( a& traci( acy$er8attac0s is &iffic%'t Best "ractices are thi(s &oe 8 ste"s ta0e 8 actios a& "'as carrie& o%t* 9or e?am"'e8J, ecry"tio is a $est "ractice a& ot a "ro&%ct or too'* There are may commercia''y a& free'y a+ai'a$'e too's 1hich may "ro+e to $e most s%ite& for a $est8"ractice mo&e'*

25 | P a g e

Fi-*0 Se6#)i&( )6&i6es C. Security Procedures

7roce&%res are s"ecific ste"s to fo''o1 that are $ase& o the com"%ter sec%rity "o'icy* 7roce&%res a&&ress s%ch to"ics as retrie+i( "ro(rams from the et1or0, coecti( to the sites system from home or 1hi'e tra+e'i(, %si( ecry"tio, a%theticatio for iss%i( acco%ts, cofi(%ratio, a& moitori(*

26 | P a g e

 CONCLUSION It is e+i&et from a$o+e &isc%ssio that iformatio sec%rity i a essetia' "art of ay e8 (o+erace iitiati+e* I I&ia e8(o+erace sceario, ho1e+er, the sec%rity as"ects are ot $ei( ta0e as serio%s'y* I 'ar(e %m$er of cases it is ot &iffic%'t to see that the &ecisio8ma0ers i the /o+erace "refer to com"romise 1he it comes to hi(h e& techo'o(y a&o"tio, im"'emetatio a& maiteace* Di(ita' sec%rity is critica' i e8(o+erace iitiati+es* )ofi&etia'ity of ay trasactio or iformatio a+ai'a$'e o the et1or0 is cr%cia'* The /o+erace &oc%met a& other im"ortat materia' ha+e to $e "rotecte& from %a%thoriFe& %sers i case of e8(o+erace "ro-ects* Hece sec%rity is critica' for s%ccessf%' im"'emetatio of s%ch "ro-ects* E8(o+erace co%"'e& 1ith sec%rity systems "ro+i&i( a&e=%ate "rotectio is the re=%iremet of ay system &esi( effort to $eat the iertia*

27 | P a g e

RE9EREN)ES 253E8/o+erace i I&ia O""ort%ities a& cha''e(es, OAA/, Vo'* 4* No* 6, 6CC* 263Shai'e&ra Si(h, Sa-ay Si'a0ari* A S%r+ey of )y$er Attac0  Detectio Systems, Iteratioa' o%ra' of )om"%ter Sciece a&  Net1or0 Sec%rity, ISSN8548C<, Vo'* No*;, ""585C May 6CC* 243A $%si+e $eha+ior htt"!!111*%s8rt*(o+!cotro'systems!"&f!%&ir8 Ecte&attac0CC;*"&f  2:3Defii(Ma'1are9AQ*techet*microsoft*com*htt"!!techet*micros oft*com!e8%s!'i$rary!&&<46:*as"?* Retrie+e& 6CC8C85C* 2;3)ho, Do(80i* The iformatio society a& "ri+acy, me&ia a& c%'t%re i the iformatio a(e, Seo%', 5* 2<3)'ar00e, R* A hi&&e cha''e(e to the re(%'atio of &ata s%r+ei''ace, o%ra' of La1 a& Iformatio Sciece :@6, 54 23Ste+e H* S"e1a0 Ste+e )* Hi'', Eter"rise Architect%re 7'ai( De+e'o"i( a B'%e"rit for Data, A""'icatio a& Techo'o(y, oh .i'ey  Sos, Ne1 Yor0, ISBN C8:58;;

28 | P a g e