Group 2 CIS5374: Awareness Group Project

About this Video

• Video Title: Group 2 CIS5374: Awareness Group Project
• Channel: Lewis Mesa
• Speakers: Kevin, Winter, Santiago Vargas, Leo Wis Mesa, Osmani Visera, Lewis Mesa
• Duration: 00:09:16

Introduction

This video presents a cybersecurity awareness project by Group 2 of CIS5374. The group aims to educate business professionals on key cybersecurity terms and their relevance to daily operations. The presentation covers assets, computer security, countermeasures, residual risk, risk analysis, and vulnerabilities.

Key Takeaways

• Assets: Anything valuable needing protection (data, systems, intellectual property). Value is determined by monetary cost, emotional attachment, and replacement cost, and can vary depending on ownership and time.
• Computer Security: The ongoing process of protecting assets against threats. This involves identifying vulnerabilities and threats. Foundational principles include confidentiality, integrity, and availability.
• Countermeasures: Actions to protect systems from threats (safe web browsing, virus detectors, source code analysis, confinement, testing). Examples include encrypting passwords and using authentication methods.
• Residual Risk: Risk remaining after implementing security controls. Management involves identifying, evaluating acceptability (based on financial impact), and monitoring leftover risks.
• Risk Analysis: Examining risks to estimate likelihood and impact on objectives. Methods include quantitative (e.g., calculating probabilities and financial losses) and qualitative (e.g., expert judgment).
• Vulnerabilities: Weaknesses in systems (hardware, software, configurations, processes) that can be exploited. Zero-day vulnerabilities are especially dangerous as they are unknown to vendors. Regular updates and testing are crucial for prevention.