Synopsis

This lecture will look at today's business environment with respect to the needs of information security. It will focus on important aspects such as risk management, today's threat environment, meeting the objectives of information security from a business perspective of needing to assure that the confidentiality, integrity and availability of information is preserved. The lecture touches upon several of the issues business is faced with today to protect its information assets: outsourcing, off-shoring, supply chains, external service providers and protecting the Intellectual Capital of a business. Other topics that will be referred to are Enterprises, 'fuzzy' boundaries and the de--parameterisation of the corporate enterprise, business metrics and measurements for benchmarking and checking the effectiveness of information security and establishing an Information Security Management System based on international standards.


About the Speaker

Ted Humphreys (Chartered Fellow of the BCS - FBCS CITP and an Honorary CISM) is Director of XiSEC Consultants Ltd a UK company providing Information Security Management consultancy services around the world. He has been an expert and management guru in the field of information security and risk management for more than 33 years. During this time he has worked for major international companies (in Europe, North America and Asia ), as well as organisations such as the European Commission and the OECD. He also lectures around the world, provides training and is the author of numerous articles on the topic of information security.

Ted Humphreys, the internationally acknowledged father of the ISO/IEC 17799 and ISMS (BS 7799) standards and the global certification movement: the editor of BS 7799 Part 1:1999, ISO/IEC 17799:2000, the 1999 and 2002 editions of BS 7799 Part 2 the ISMS standard and the EA 7/03 the ISMS accreditation guidelines. He is the Founder and Director of the ISMS International User Group and is responsible for the International Register of BS 7799/ISMS Certificates.

In 2002 he was honoured with the Secure Computing Lifetime Achievement Award and in 2005 he was honoured with the international KPMG ISMS Lifetime Achievement Award as the internationally acknowledged author of these BS 7799 based ISMS standards. These international awards recognises his noteworthy achievements in shaping and promoting the development and standardisation of information security management BS 7799 best practice standards and the ISMS certification movement.